Intel? Pentium? III Processor 
Specification Update 


Release Date: May 2001 


Order Number: 244453-029 


The Pentium® IIl processor may contain design defects or errors known as errata which may cause the 
product to deviate from published specifications. Current characterized errata are documented in this 
Specification Update. 


Information in this document is provided in connection with Intel® products. No license, express or implied, by estoppel or 
otherwise, to any intellectual property rights is granted by this document. Except as provided in Intel’s Terms and Conditions 
of Sale for such products, Intel assumes no liability whatsoever, and Intel disclaims any express or implied warranty, relating 
to sale and/or use of Intel products including liability or warranties relating to fitness for a particular purpose, merchantability, 
or infringement of any patent, copyright or other intellectual property right. Intel products are not intended for use in medical, 
life saving, or life sustaining applications. 


Intel may make changes to specifications and product descriptions at any time, without notice. 


Designers must not rely on the absence or characteristics of any features or instructions marked “reserved” or “undefined.” 
Intel reserves these for future definition and shall have no responsibility whatsoever for conflicts or incompatibilities arising 
from future changes to them. 


The Pentium® IIl processor may contain design defects or errors known as errata which may cause the product to deviate 
from published specifications. Current characterized errata are available on request. 


The Specification Update should be publicly available following the last shipment date for a period of time equal to the 
specific product's warranty period. Hardcopy Specification Updates will be available for one (1) year following End of Life 
(EOL). Web access will be available for three (3) years following EOL. 


Contact your local Intel sales office or your distributor to obtain the latest specifications and before placing your product 
order. 


Copies of documents which have an ordering number and are referenced in this document, or other Intel literature, may be 
obtained by calling 1-800-548-4725 or by visiting Intel’s website at http://www.intel.com 


Copyright O Intel Corporation 1999- 2001. 


Intel, Intel logo, Pentium, and MMX are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the 
United States and other countries. 


* Other names and brands may be claimed as the property of others. 


CONTENTS 


REVISION: HISTORY. Su etr u RU e Ee ee o RE рн ii 
РАЕРАСЕ лун нон a ee eee oap unam eiiam v 
Specification Update for the Pentium® III Processor 

GENERAL ЛМЕОНМА ОМ L u u аана АЛНА О н НУН аЬ 1 
Pentium? III Processor and Boxed Pentium® IIl Processor З Line Маж... 1 
Pentium? IIl Processor Markings ........c:ssssssssessessessessecsessussessussussussnsessssseassseeatssessseaeesersesserseesersessssessueeeeeseees 1 
IDENTIFICATION INFORMATION. t s иаининея 2 
Mixed Steppings in DP Зу$ет$................ нынын нынын ннн нн 3 
SUMMARY OF CHANGES... з о о а АНН аьа 20 

Sümmary of iu ннн a ——— 21 

Summary of Documentation СпПапдез................. ннн 25 

Summary for Specification Clarifications .................... L... 26 

Summary of Specification Спапде5............ нанынын нынын nennen 26 
ERRATA dE aoa eal att aoa ee a ne — ЬЬЬ: 27 
DOCUMENTATION: GHANGES ла а ливри aly ata Shielded adda ta Ree 64 
SPECIFICATION СЕАВИ:АСАТЮМФ............... n n нынын 75 
SPECIFICATION CHAN GE Sa 5: аа ERR PRETEREA REDEEM (Hr eR e ren 78 


Iñ ® 


PENTIUM® Ill PROCESSOR SPECIFICATION UPDATE 


REVISION HISTORY 


Date of Revision 


Version 


Description 


March 1999 


-001 


This is the first Specification Update for Pentium® III processors. 


April 1999 


-002 


Added Erratum E42. Deleted Erratum E16 and renumbered existing 
items. Corrected Errata table "Plans" column for E39. Updated the 
Pentium Ш Processor Identification Information table. 


May 1999 


-003 


Updated the Pentium Ш Processor Identification Information table. 
Updated the Errata table by marking Errata E34, E35, and E40 as 
Fixed. 


June 1999 


-004 


Updated the Pentium III Processor Identification and Package 
Information table. Added Erratum 43. Added Documentation Change 
E1. Added Specification Clarifications E1 and E2. Added Specification 
Change E3. 


July 1999 


-005 


Added footnote 4 to the Pentium III Processor Identification and 
Package Information table. Added Erratum E44. Added stepping KcO 
in Summary Table of Changes. Added Mixed Steppings in DP 
Systems section. Updated Documentation Changes, Specification 
Clarifications, and Specification Changes introduction paragraphs. 


August 1999 


-006 


Added Errata E45 and E46. Added Documentation Change E2. 
Updated Identification Information table. Updated and corrected 
Pentium Ш Processor Identification and Package Information table. 
Updated Codes Used in Summary Table. Updated column heading in 
Errata, Documentation Changes, Specification Clarifications and 
Specification Changes tables. 


September 1999 


-007 


Revised Errata E45. Updated DP Platform Population Matrix for the 
Pentium Ш Processor with 100 MHz System Bus. Updated datasheet 
references to include the latest supported frequency. 


October 1999 


-008 


Added Errata E47. Updated the Pentium Ш Processor Identification 
and Package Information table. Added the DP Platform Population 
Matrix for the Pentium Ш Processor with 133 MHz System Bus table. 
Added Brand ID column to /dentification Information. Updated 
datasheet references to include the latest supported frequency. 


November 1999 


-009 


Added Errata E48 and E49. Added Documentation Change E3. 
Added new stepping column in the Summary of Changes tables. 
Updated the Pentium? III Processor Identification Information tables. 
Updated Mixed Steppings in DP System section. Updated the 
Pentium? III Process Identification Information table. Updated 
references. 


December 1999 


-010 


Updated document references in Preface to include new Pentium || 
processor datasheets. Updated errata E10, E11, E19, and E32 in the 
Summary of Errata table. Added Errata E50-E58. Added 
Documentation Change E4. Added Specification Clarification ЕЗ. 
Added Specification Changes E4 and E5. 


December 1999 


-011 


Corrected an error in the Summary of Errata table. Erratum E56 was 


intel. 


REVISION HISTORY 


PENTIUM® Ill PROCESSOR SPECIFICATION UPDATE 


Date of Revision 


Version 


Description 


incorrectly shown as applying to the Ca2 stepping. Erratum E56 does 
NOT apply to the Ca2 stepping. 


January 2000 


-012 


Updated Preface to include new Pentium Ш processor datasheets. 
Added 800-MHz Pentium Ш processor information to the DP Platform 
Population Matrix tables and the Pentium® III Processor Identification 
and Packaging Information table. Added note 10 to the Pentium? III 
Processor Identification and Packaging Information table and updated 
Notes column and other table data. Updated erratum E51. Added 
Errata E59-E62. Added Documentation Change E5. Added 
Specification Change E6. 


February 2000 


-013 


Updated Errata E49 and E61. Added Documentation Change E6. 
Updated the Pentium® III Processor Identification Information. 
Updated S-Spec SL365. Updated Summary of Changes product letter 
codes. 


March 2000 


-014 


Updated Preface to include new Pentium III processor datasheet. 
Updated Pentium® IIl Processor Identification and Package 
Information table. Updated Summary of Errata, Summary of 
Documentation Changes, Summary of Specification Clarifications 
Summary of Specification Changes tables with CbO stepping. Updated 
Erratum E48. 


March 2000 


-015 


Special Launch Edition: Updated the new Cb0 stepping information. 
Updated the document references in the Preface. Updated DP 
population table. 


April 2000 


-016 


Updated Processor Identification Information table. Updated DP 
Population Tables. Added Errata E63 & E64. 


May 2000 


-017 


Updated Pentium 11! Processor Identification and Package Information 
table. Updated Errata E64. Added Errata E65 & E66. 


June 2000 


-018 


Updated Processor Identification, Summary of Errata, and Summary 
of Specification Changes tables. Updated Dual Processor Tables. 
Added new Specification Change E7. 


July 2000 


-019 


Added new errata E67 & E68. Updated Processor Identification Table. 
Edited erratum E36. Updated Processor Identification, Summary of 
Errata, Summary of Documentation Changes, Summary of 
Specification Clarifications, Summary of Specification Changes tables 
with cCO Stepping. 


August 2000 


-020 


Added new Erratum E69. Updated Dual Processor Matrix. Updated 
Dual Processor Matrix. Updated Processor Identification Table with 
new CO step CPUs. 


September 2000 


-021 


Added New Errata E70 & E71. Added Re-Writes for Errata E28, E48, 
& E62. Added New Documentation Changes E7 & E8. Updated Dual 
Processor Matrix, removed TBDs. Updated Processor Identification 
Table. 


Iñ @ 


PENTIUM® Ill PROCESSOR SPECIFICATION UPDATE 


REVISION HISTORY 


Date of Revision Version Description 

October 2000 -022 Updated Pentium® III Processor Identification Information table. 
Updated Dual Processor Matrix. Added New Errata E72 and E73. 
Added New Documentation Changes E9 and E10. 

November 2000 -023 Updated Processor Identification Table. Added New Erratum E73. 

December 2000 -024 Updated Specification Update product key to include the Intel® 
Pentium® 4 processor, Revised Erratum E2. Added new 
Documentation Changes E11 — E16. 

January 2001 -025 Revised Erratum E2. Added new Documentation Changes E17 and 
E18. Updated Processor Identification Table. 

February 2001 -026 Added new Documentation Change E19. Revised Documentation 
Change E17. 

March 2001 -027 Added new Errata E74 and E75. 

March 2001 -028 Added erratum E76 

May 2001 -029 Revised Erratum E76 to Fixed. Updated processor identification table. 


Updated the tables in the Mixed Steppings in DP Systems section. 


ш 
| n tel ® 
PENTIUM® | PROCESSOR SPECIFICATION UPDATE 


PREFACE 


This document is an update to the specifications contained in the following documents: 


° Pentium® IlI Processor for ће SC242 at 450 MHz to 1.13 GHz datasheet (Order Number 244452) 
e Pentium® III Processor for the PGA370 Socket up to 1.0 GHz datasheet (Order Number 245264) 


° Intel Architecture Software Developer’s Manual, Volumes 1, 2 and 3 (Order Numbers 243190, 243191, 
and 243192, respectively) 


It is intended for hardware system manufacturers and software developers of applications, operating systems, 
or tools. It contains S-Specs, Errata, Documentation Changes, Specification Clarifications, and Specification 
Changes. 


Nomenclature 


S-Spec Number is a five-digit code used to identify products. Products are differentiated by their unique 
characteristics, e.g., core speed, L2 cache size, package type, etc., as described in the processor 
identification information table. Care should be taken to read all notes associated with each S-Spec number. 


Errata are design defects or errors. Errata may cause the Pentium Ш processor’s behavior to deviate from 
published specifications. Hardware and software designed to be used with any given processor must assume 
that all errata documented for that processor are present on all devices unless otherwise noted. 


Documentation Changes include typos, errors, or omissions from the current published specifications. These 
changes will be incorporated in the next release of the specifications. 


Specification Clarifications describe a specification in greater detail or further highlight a specification’s 
impact to a complex design situation. These clarifications will be incorporated in the next release of the 
specifications. 


Specification Changes are modifications to the current published specifications for the Pentium Ш processor. 
These changes will be incorporated in the next release of the appropriate documentation(s). 


Specification Update for the 
Pentium@ III Processor 
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GENERAL INFORMATION 


Pentium® III Processor and Boxed Pentium® III Processor 3 Line 
Markings 


Dynamic Mark Area Speed / Cache / Bus / Voltage 2-0 Matrix Mark 
UL Identifier | 
ЛР РА 
ЕРО - Serial # Country —>» FFFEFFFF-NNNN XXXXX Е: 
of Assy im@98 SYYYY 


те S-Spec 


Pentium® IIl Processor Markings 
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IDENTIFICATION INFORMATION 


The Pentium® III processor can be identified by the following values: 


0110 0111 00h = Not Supported 


0110 1000 02h = "Intel? Pentium® Ш Processor" 


NOTES: 

1. The Family corresponds to bits [11:8] of the EDX register after RESET, bits [11:8] of the EAX register after the 
CPUID instruction is executed with a 1 in the EAX register, and the generation field of the Device ID register 
accessible through Boundary Scan. 

2. The Model corresponds to bits [7:4] of the EDX register after RESET, bits [7:4] of the EAX register after the CPUID 
instruction is executed with a 1 in the EAX register, and the model field of the Device ID register accessible through 
Boundary Scan. 

3. The Brand ID corresponds to bits [7:0] of the EBX register after the CPUID instruction is executed with a 1 in the 
EAX register. 


The Pentium Ill processor’s second level (L2) cache size can be determined by the following register contents: 


512-Kbyte Unified L2 Cache! 43h 
256-Kbyte 8 way set associative 32byte line 82h 
size, L2 Cache! 
NOTE: 
1. For the Pentium Ш processor, the unified L2 cache size corresponds to a token in the EDX register after the CPUID 


instruction is executed with a 2 in the EAX register. Other Intel microprocessor models or families may move this 
information to other bit positions or otherwise reformat the result returned by this instruction; generic code should 
parse the resulting token stream according to the definition of the CPUID instruction. 
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Mixed Steppings in DP Systems 


Intel Corporation fully supports mixed steppings of Pentium Ill processors. The following list and processor 
matrix describes the requirements to support mixed steppings: 


Mixed steppings are only supported with processors that have identical family and model number as 
indicated by the CPUID instruction. 


While Intel has done nothing to specifically prevent processors operating at differing frequencies from 
functioning within a multiprocessor system, there may be uncharacterized errata that exist in such 
configurations. Intel does not support such configurations. In mixed stepping systems, all processors must 
operate at identical frequencies (i.e., the highest frequency rating commonly supported by all processors). 


While there are no known issues associated with the mixing of processors with differing cache sizes ina 
dual processor system, and Intel has done nothing to specifically prevent such system configurations from 
operating, Intel does not support such configurations since there may be uncharacterized errata that exist. 
In dual processor systems, all processors must be of the same cache size. 


While Intel believes that certain customers may wish to perform validation of system configurations with 
mixed frequency or cache sizes, and that those efforts are an acceptable option to our customers, 
customers would be fully responsible for the validation of such configurations. 


The workarounds identified in this and following specification updates must be properly applied to each 
processor in the system. Certain errata are specific to the dual processor environment and are identified in 
the Mixed Stepping Processor Matrix found at the end of this section. Errata for all processor steppings will 
affect system performance if not properly worked around. Also see the “Pentium® || Processor 
Identification and Package Information" table for additional details on which processors are affected by 
specific errata. 


In dual processor systems, the processor with the lowest feature-set, as determined by the CPUID Feature 
Bytes, must be the Bootstrap Processor (BSP). In the event of a tie in feature-set, the tie should be 
resolved by selecting the BSP as the processor with the lowest stepping as determined by the CPUID 
instruction. 


In the following processor matrix a number indicates that a known issue has been identified as listed in the table 
following the matrix. A dual processor system using mixed processor steppings must assure that errata are 
addressed appropriately for each processor. 
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DP Platform Population Matrix for the Pentium® Ill Processor with 100-MHz System Bus in the SECC and SECC2 Packages 


Pentium® IIl | 450 | 500 | 450 | 500 | 550 | 600 |600E| 650 | 700 | 750 | 800 |550Е |600Е 650 | 700 | 750 | 800 | 850 |6ООЕ | 650 | 700 | 750 | 800 | 850 | 1 
Processor MHz MHz MHz MHz MHz MHz MHz MHz MHz MHz MHz | MHz MHz | MHz | MHz | MHz MHz | MHz} МН? | MHz | МН? | MHz | МН? | MHz! GHz 
Stepping КВО | КВО | КСО | КСО | КСО | КСО | cA2 | СА2 | СА2 | СА2 | СА2 | cB0 | cB0 | cB0 | cB0 | cB0 | cB0 | cB0 | cC0 | сСО | сСО | cC0 | cC0 | cC0 | cC0 


450-MHz kB0 N | X | NI] X X X X X X X X X X X X X X X 
500-МН2 КВО 


Бонне | >] | 
EJES 
омно | <| | 
помнење |] 

800 MHz cA2 


МОТЕ5: 
X= Mixing processors at different frequencies is not supported. This stepping/frequency not supported in DP. 
Nl= Currently no known issues associated with mixing these steppings. 
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DP Platform Population Matrix for the Pentium@ III Processor with 133-MHz System Bus in the SECC and 
SECC2 Package from 533MHz to 733MHz 
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Pentium® Ill | 5338 | 5338 | 6008 |533EB|600EB| 667 | 733 |533ЕВ |600ЕВ| 667 | 733 |600EB| 667 | 733 
Processor MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz 
Stepping кво | ксо | ксо СА2 | cA2 | cA2 | cA2 | сВО | сВО | cBO | cBO | сСО | сСО | сСО 
533B-MHz КВО NI NI X X X X X X X X X X X X 
533B-MHz КСО NI NI X X X X X X X X X X X X 
I600B-MHz КСО x x NI x x X X X X X X X X x 
533EB-MHz cA2 X X X NI X X X NI X X X X X X 
600EB-MHz cA2 X X X NI X X NI X X NI X X 
667-МН2 cA2 X X X NI X NI X NI X 
/ 33-MHz cA2 X X X X X NI X X NI X NI 
БЗЗЕВ MHz cBO X x x NI x x NI X X 
БООЕВ MHz cBO X X X X NI X X NI NI 
667 MHz cBO X X X X NI x NI NI 
733 MHz cB0 X X X X NI X NI NI 
600EB-MHz cCO x x x x NI x NI NI 
667-MHz cC0 x x x x NI x NI NI 
1733-MHz cC0 x x x x X NI X X NI X NI 
NOTES: 
X= Mixing processors at different frequencies is not supported. This stepping/frequency is not supported in Dual Processor. 
NI- Currently no known issues associated with mixing these steppings. 
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DP Platform Population Matrix for the Pentium® III Processor with 133-MHz System Bus in the SECC and SECC2 
Package from 800MHz to 1.13GHz 


Pentium® III Processor 800EB 800EB 866 MHz | 933 MHz | 1B GHz | 800ЕВ |866 MHz| 933 MHz |1В GHz 1.13 GHz 
Stepping MHz cA2 | MHz cB0 cB0 cB0, сво | МН2 сС0 | сС0, cCo, cco cco 

800EB-MHz cA2 NI NI X X X NI X X X X 
800EB MHz cBO NI NI X X X NI X X X X 
866 MHz cBO X X NI X X NI X X X 
933 MHz cBO X X X NI x NI x x 
1B GHz сво X X X X X X 
800EB MHz cCO NI NI X NI X X 
866 MHz cCO X X NI X X NI X X 
933 MHz cCO X X NI X X NI X X 
1B GHz cCO X X X X NI X 
1.13 GHz cC0 X X X X X X 
NOTES: 
X= Mixing processors at different frequencies is not supported. This stepping/frequency is not supported in Dual Processor. 
NI- Currently no known issues associated with mixing these steppings. 


DP Platform Population Matrix for the Pentium® III Processor 
with 100-MHz System Bus in the FC-PGA370 Package from 500 
MHz to 650 MHz 


Pentium® lll 500E MHz | 550E MHz | 600E MHz | 650 MHz 
Processor сво сво сво сво 
Stepping 

500E-MHz cB0 NI X X X 


ено | x | M | X | > | 
ewe | x | X | M | > _ 


omz | x | x< | x | w | 


DP Platform Population Matrix for the Pentium® III Processor with 100-MHz System Bus in the FC-PGA370 
Package from 700 MHz to 850 MHz 


Pentium® Ill | 700 | 750 | 800 | 850 |600E | 650 | 700 | 750 | 800 | 850 | 700 | 750 | 800 | 850 
Processor MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz 
Stepping сво | сво | сво | сво | сСО | сСО | сСО | сСО | сСО | сСО | сро | сро | сро | сро 


томно | м о о о о а о о о [жор х | x | x | 
твоме cso | | м | X [X [X [ X [ X | 9 [хх oe pee | x | x | 


[ooo | x< [x | a| <| < | x | “| < | m x |> | x Ге 
sue | x | < Px [м | x | x | = | C L < [м | x x | [тез 
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DP Platform Population Matrix for the Pentium® III Processor with 100-MHz System Bus in the FC-PGA370 
Package from 700 MHz to 850 MHz 


Pentium® Ш | 700 | 750 | 800 | 850 | 600Е | 650 | 700 | 750 | 800 | 850 | 700 | 750 | 800 | 850 
Processor MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz | MHz 
Stepping сво | сво | сво | сво | сСО | cC0 | cC0 | сСО | сСО | сСО | сро | сро | сро | сро 


600E-MHz x Х Х 
cC0 


мноо | < | < | <| < | =] ESES — — 
LIST IERESESESESEREEESESEN о 
твоме coo | | m | x | x| x| x | x|w | x | = | = | <| x | x | 
zoo | x | x | m | x| x| x | x | x | | Бера а 
sown ooo [x [X [x [wx] x] x о x ES СЕ ЕС 
[rows сво [o [ |x| [8 [XX РОУ РО [хм [x [x [x | 
омно | x [s | | [X | мо | | | о | [x [x 
mia a= D Ld e ПС Е] 
ДЕ АЕ ПА И ПА ПА И a Л 


МОТЕ5: 
Х= Mixing processors at different frequencies is not supported. 
NI- Currently no known issues associated with mixing these steppings. 


TBD- To be determined. 


DP Platform Population Matrix for the Pentium® III Processor with 100-MHz System Bus in the FC-PGA370 
Package from 700 MHz to 850 MHz 


Pentium® lll 700 750 800 850 700 750 800 850 700 750 | 800 | 850 
Processor MHz MHz MHz MHz MHz MHz | MHz | MHz MHz | MHz | MHz | MHz 
Stepping cB0 cB0 cB0 cB0 cC0 cC0 cCO | cco cDO | cDO | cDO | cD0 
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DP Platform Population Matrix for the Pentium® III Processor with 133-MHz System Bus in the FC-PGA370 
Package from 533 MHz to 800 MHz 


Pentium® Ш 533E | 600E | 667 733 | 800E | 866 | 933 | 600Е | 667 733 | 800 733 | 800E 
Processor B B MHz | MHz B MHz | MHz B MHz | MHz | ЕВ B 
Stepping MHz | MHz | cBO | cBO | MHz | cBO | cBO | MHz | cCO | сСО | MHz сро | MHz 
cB0 cB0 cB0 cC0 cC0 
cD0 
533EB-MHz cB0 NI X X X X X X X X X X X X 
866-MHz cBO X X X X X NI X X X X X X X 
933-MHz сво X X X X X NI X X X X X X 
600EB-MHz cCO X NI X X X X X NI X X X X X 
667-MHz cCO X X NI X X X X X NI X X X X 
733-MHz cCO X X X NI X X X X X NI X X X 
800EB-MHz cCO X X X X NI X X X X X NI X X 
733-MHz cDO X X X TBD X X X X X NI X NI X 
800EB-MHz cDO X X X X TBD X X X X X NI X NI 
NOTES: 
X= Mixing processors at different frequencies is not supported. 
Nl= Currently no known issues associated with mixing these steppings. 


TBD= To be determined. 


DP Platform Population Matrix for the Pentium® III Processor with 133-MHz System Bus in the FC-PGA370 
Package from 866 MHz to 1 GHz 


Pentium® Ill Processor | 866 MHz | 933 MHz | 866 MHz | 933 MHz | 1B GHz 
Stepping cB0 cB0 cC0 cC0 cC0 


cD0 cD0 cD0 
866-MHz cB0 NI X NI X X TBD X X 
933-MHz cBO X NI X NI X X TBD X 
866-MHz cC0 NI X NI X X NI X X 
933-MHz cCO X NI X NI X x NI X 
1B-GHz cCO X X X X NI X X NI 
866-MHz cD0 TBD x NI X X NI X X 
933-MHz cDO X TBD X NI X X NI X 
1B-GHz cD0 X X X X NI X X NI 
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Mixing processors at different frequencies is not supported. 
Currently no known issues associated with mixing these steppings. 
To be determined. 
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Pentium® Ш Processor Identification and Package Information 


Speed Processor Package 
Core (MHz) L2 Size Tag RAW/ ECC/ Substrate and 
S-Spec | Steppings | CPUID Core/Bus!! (Kbytes) | Steppings | Non-ECC Revision Revision Notes 
SL364 кво 0672h 450/100 512 T6P-e/A0 ECC D SECC2 | 1,2,4 
SL365 кво 0672h 500/100 512 T6P-e/A0 ECG D SEGC2' 1,2, 
4,8 
SL3CC кво 0672h 450/100 512 T6P-e/A0 ECG D SECC2' 1,2, 
3,4 
SL3CD кво 0672h 500/100 512 T6P-e/A0 ECG D SECC2' 1,2, 
3,4 
SL38E кво 0672h 450/100 512 T6P-e/A0 ECG D S.E.C.G 1,2,4 
SL38F кво 0672h 500/100 512 T6P-e/A0 ЕСС D S.E.C.G 1,2,4 
SL35D КСО 0673h 450/100 512 T6P-e/A0 ECG E SECC2' 1,4 
SL37C kC0 0673h 450/100 512 T6P-e/A0 ECG Е SECC2' 1,3,4 
SL35E kC0 0673h 500/100 512 T6P-e/A0 ECG Е SECC2' 1,4 
SL37D kC0 0673h 500/100 512 T6P-e/A0 ECG Е SECC2' 1,3,4 
SL3F7 kC0 0673h 550/100 512 T6P-e/A0 ECG Е SECC2' 1,4 
SL3FJ КСО 0673h 550/100 512 T6P-e/A0 ECG E SECC2' 1,3,4 
SL3BN kC0 0673h 533B/133 512 T6P-e/A0 ECG E SECC2' 1,4, 
10 
SL3E9 КСО 0673h 533B/133 512 Т6Р-е/АО ЕСС Е SECC2' 1,3, 
4,10 
SL3JM КСО 0673h 600/100 512 ТбР-е/АО ЕСС Е SECC2' 1,4 
SL3JT kC0 0673h 600/100 512 T6P-e/A0 ECG E SECC2' 1,3,4 
SL3JP kC0 0673h 600B/133 512 T6p-e/A0 ECG E SECC2' 1,4, 
10 
SL3JU КСО 0673h 600B/133 512 T6P-e/A0 ECG E ЗЕСС2" 1, 3, 
4, 10 
51309 cA2 0681h 500E/100 256 N/A ECG B FC-PGA 9, 10 
(370 pin 
SL3R2 cA2 0681h 500E/100 256 N/A ECC B FC-PGA 7, 9, 
(870 pin 10 
SL3VF cA2 0681h 533EB/133 256 N/A ECC B FC-PGA 9, 10 
(370 pin 
SL3VA cA2 0681h 533EB/133 256 N/A ECC B FC-PGA 7, 9, 
(370 pin 10 
SL3QA cA2 0681h 550E/100 256 N/A ECC B FC-PGA 9, 10 
(370 pin 
SL3R3 cA2 0681h 550E/100 256 N/A ECC B FC-PGA 7,9, 
(870 pin 10 
SL3VH cA2 0681h 600E/100 256 N/A ECC B FC-PGA 9, 10 
(370 pin 
SL3NL cA2 0681h 600E/100 256 N/A ECC B FC-PGA 7,9, 
(870 pin 10 
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PENTIUM® | PROCESSOR SPECIFICATION UPDATE 


Pentium® Ш Processor Identification and Package Information 


Speed Processor Package 
Core (MHz) L2 Size Tag RAM/ ECC/ Substrate and 
S-Spec | Steppings | CPUID | Core/Bus'"' (Kbytes) | Steppings | Non-ECC Revision Revision Notes 
SL3VG cA2 0681h 600EB/133 256 N/A ECC B FC-PGA 9, 10 
(370 pin 
SL3VB cA2 0681h 600EB/133 256 N/A ECC B FC-PGA 7, 9, 
(370 pin 10 
SL3VJ cA2 0681h 650/100 256 N/A ECC B FC-PGA 9 
(370 pin 
SL3NM cA2 0681h 650/100 256 N/A ECC B FC-PGA 7,9 
(370 pin 
SL3VK cA2 0681h 667/133 256 N/A ECC B FC-PGA 9 
(370 pin 
SL3T2 cA2 0681h 667/133 256 N/A ECC B FC-PGA 7,9 
(370 pin 
SL3VL cA2 0681h 700/100 256 N/A ECC B FC-PGA 9 
(370 pin 
SL3T3 cA2 0681h 700/100 256 N/A ECC B FC-PGA 7,9 
(370 pin 
SL3VM cA2 0681h 733/133 256 N/A ECC B FC-PGA 9 
(370 pin 
SL3T4 cA2 0681h 733/133 256 N/A ECG B FC-PGA 7,9 
(370 pin 
SL3VN cA2 0681h 750/100 256 N/A ECC B FC-PGA 9 
(370 pin 
SL3VC cA2 0681h 750/100 256 N/A ECC B FC-PGA 7,9 
(370 pin 
SL3WB cA2 0681h 800EB/133 256 N/A ECC B FC-PGA 9, 10 
(370 pin 
SL3VE cA2 0681h 800EB/133 256 N/A ECC B FC-PGA 7,9, 
(370 pin 10 
SL3X4 cA2 0681h 800/100 256 N/A ECC B FC-PGA 9, 10 
(370 pin 
SL3VD cA2 0681h 800/100 256 N/A ECC B FC-PGA 7, 9, 
(370 pin 10 
SL444/ сво 0683h 500E/100 256 N/A ECG B FC-PGA 10 
SL446 (370 pin 
SL45R cB0 0683h 500E/100 256 N/A ЕСС B FC-PGA 10,7 
(370 pin 
SL3XS сво 0683h 533EB/133 256 N/A ECG B FC-PGA 10 
(370 pin 
SL45S cB0 0683h 533EB/133 256 N/A ECG B FC-PGA 10,7 
(370 pin 
SL44G сво 0683h 550E/100 256 N/A ECG B FC-PGA 7 
(370 pin 
SL45T cB0 0683h 550E/100 256 N/A ECG B FC-PGA 10,7 
(370 pin 


PENTIUMS | PROCESSOR SPECIFICATION UPDATE 


Pentium® Ш Processor Identification and Package Information 


Speed Processor Package 
Core (MHz) L2 Size Tag RAM/ ECC/ Substrate and 

S-Spec | Steppings | CPUID | Core/Bus'"' (Kbytes) | Steppings | Non-ECC Revision Revision Notes 

SL3XT сво 0683h 600EB/133 256 N/A ECG B FC-PGA 10 
(370 pin 

SL45V сво 0683h 600EB/133 256 N/A ECG B FC-PGA 10,7 
(370 pin 

SL3XU сво 0683h 600E/100 256 N/A ЕСС B FC-PGA 10 
(370 pin 

SL45U сво 0683h 600E/100 256 N/A ECG B FC-PGA 10,7 
(370 pin 

SL3XV сво 0683h 650/100 256 N/A ECG B FC-PGA 
(370 pin 

SL45W сво 0683h 650/100 256 N/A ECG B FC-PGA 7 
(370 pin 

SL3XW cB0 0683h 667/133 256 N/A ECG B FC-PGA 
(370 pin 

SL45X сво 0683h 667/133 256 N/A ECG B FC-PGA 7 
(370 pin 

SL3XX сво 0683h 700/100 256 N/A ECG B FC-PGA 
(370 pin 

SL45Y cB0 0683h 700/100 256 N/A ECG B FC-PGA 7 
(370 pin 

SL45Z cB0 0683h 733/133 256 N/A ECG B FC-PGA 7 
(370 pin 

SL3XY сво 0683h 733/133 256 N/A ECG B FC-PGA 
(370 pin 

SL3XZ cB0 0683h 750/100 256 N/A ECG B FC-PGA 
(370 pin 

SL462 сво 0683h 750/100 256 N/A ECG B FC-PGA 7 
(370 pin 

SL3Y2 cB0 0683h 800EB/133 256 N/A ECG B FC-PGA 10 
(370 pin 

SL464 cB0 0683h 800EB/133 256 N/A ECG B FC-PGA 7,10 
(370 pin 

SL3Y3 сво 0683h 800/100 256 N/A ECG B FC-PGA 10 
(370 pin 

51463 сво 0683h 800/100 256 N/A ЕСС B FC-PGA 7,10 
(370 pin 

SL43H cB0 0683h 850/100 256 N/A ECG B FC-PGA 
(370 pin 

SL49G сво 0683h 850/100 256 N/A ECG B FC-PGA 7 
(370 pin 

SL43J cB0 0683h 866/133 256 N/A ECG B FC-PGA 
(370 pin 

SL49H сво 0683h 866/133 256 N/A ECG B FC-PGA 7 
(370 pin 
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PENTIUM® Ill PROCESSOR SPECIFICATION UPDATE 


Pentium® Ш Processor Identification and Package Information 


Speed Processor Package 
Core (MHz) L2 Size Tag RAM/ ECC/ Substrate and 

S-Spec | Steppings | CPUID | Соге/Ви5"" (Kbytes) | Steppings | Non-ECC Revision Revision Notes 

SL44J сво 0683h 933/133 256 N/A ECG B FC-PGA 
(370 pin 

SL49J cB0 0683h 933/133 256 N/A ECG B FC-PGA 7 
(370 pin 

SL4CM cC0 0686h 600E/100 256 N/A ECG C FC-PGA 
(370 pin 

SL4CL cC0 0686h 600EB/133 256 N/A ECG C FC-PGA 
(370 pin 

SL4CK cC0 0686h 650/100 256 N/A ECG C FC-PGA 
(370 pin 

SL4CJ cC0 0686h 667/133 256 N/A ECG C FC-PGA 
(370 pin 

SL4CH cC0 0686h 700/100 256 N/A ECG C FC-PGA 
(370 pin 

SL4M7 cC0 0686h 700/100 256 N/A ECG C FC-PGA 7,13 
(370 pin 

SL4CG cC0 0686h 733/133 256 N/A ECC C FC-PGA 
(370 pin) 

SL4M8 cC0 0686h 733/133 256 N/A ЕСС G FC-PGA 7,13 
(370 pin) 

SL4CF cC0 0686h 750/100 256 N/A ECC C FC-PGA 
(370 pin) 

SL4M9 cC0 0686h 750/100 256 N/A ECG C FC-PGA 7,13 
(370 pin) 

SL4CE cC0 0686h 800/100 256 N/A ECG C FC-PGA 
(370 pin) 

SL4MA cC0 0686h 800/100 256 N/A ECC C FC-PGA 7,13 
(370 pin) 


PENTIUMS | PROCESSOR SPECIFICATION UPDATE 


Pentium® Ш Processor Identification and Package Information 


Speed Processor Package 
Core (MHz) L2 Size Tag RAM/ ECC/ Substrate and 
S-Spec | Steppings | CPUID | Соге/Ви5"" (Kbytes) | Steppings | Non-ECC Revision Revision Notes 
SL4CD cC0 0686h | 800EB/133 256 N/A ECC C FC-PGA 
(370 pin) 
SL4MB cC0 0686h | 800EB/133 256 N/A ECC C FC-PGA 7,13 
(370 pin) 
SL4CC cC0 0686h 850/100 256 N/A ECG C FC-PGA 
(370 pin 
SL4MC cC0 0686h 850/100 256 N/A ECG C FC-PGA 7,13 
(370 pin 
SL4CB cC0 0686h 866/133 256 N/A ECG C FC-PGA 
(370 pin 
SL4MD cC0 0686h 866/133 256 N/A ECG C FC-PGA 7,13 
(370 pin 
SL4SD cC0 0686h 900/100 256 N/A ЕСС C FC-PGA 
(370 pin 
SL4C9 cC0 0686h 933/133 256 N/A ЕСС C FC-PGA 
(370 pin 
SL4ME cC0 0686h 933/133 256 N/A ECG C FC-PGA 7,15 
(370 pin 
SL4C8 cC0 0686h | 1B GHz/133 256 N/A ЕСС C FC-PGA 
(370 pin 
SLAMF cC0 0686h | 1B GHz/133 256 N/A ECG C FC-PGA 15 
(370 pin 
SL4WM cC0 0686h | 1B GHz/133 256 N/A ECG C FC-PGA 16 
(370 pin) 
SL3H7 cA2 0681h 600EB/133 256 N/A ECG B SECC2 10 
SL3NB cA2 0681h 600EB/133 256 N/A ECG B SECC2 8,10 
SL3KV cA2 0681h 650/100 256 N/A ECG B SECC2 
SL3NR cA2 0681h 650/100 256 N/A ЕСС B SECC2 8 
SL3KW cA2 0681h 667/133 256 N/A ECG B SECC2 
SL3ND cA2 0681h 667/133 256 N/A ECG B SECC2 8 
SL3S9 cA2 0681h 700/100 256 N/A ECG B SECC2 
SL3SY cA2 0681h 700/100 256 N/A ECG B SECC2 8 
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PENTIUM® Ill PROCESSOR SPECIFICATION UPDATE 


Pentium® Ш Processor Identification and Package Information 


Speed Processor Package 
Core (MHz) L2 Size Tag RAM/ ECC/ Substrate and 
S-Spec | Steppings | CPUID | Соге/Ви5"" (Kbytes) | Steppings | Non-ECC Revision Revision Notes 
SL5B5 с00 068 АК 866/133 256 N/A ECC С ЕС-РВА 7,17 
(370 pin 
SL5QE cD0 068Ah 866/133 256 N/A ЕСС C FC-PGA 17, 18 
(370 pin 
SL5QF cD0 068Ah 933/133 256 N/A ECC c FC-PGA 17, 18 
(370 pin 
SL5QJ cD0 068Ah | 1B GHz/133 256 N/A ECC C ЕС-РСА2 | 18, 19 
(370 pin 
D 
SL5QK cD0 068Ah | 1B GHz/133 256 N/A ECC [9 FC-PGA2 18, 19 
(370 pin 
SL5B2 сро 068Ah | 1B GHz/133 256 N/A ECC C FC-PGA2 17 
(370 pin 
SL4YV cD0 068Ah | 1B GHz/133 256 N/A ECC [9 FC-PGA2 17 
(370 pin 
SL3SB cA2 0681h 733/133 256 N/A ECC B SECC2 
SL3SZ cA2 0681h 733/133 256 N/A ECC B SECC2 8 
SL3H6 cA2 0681h 600E/100 256 N/A ECC B SECC2 10 
SL3N6 cA2 0681h 533EB/133 256 N/A ECC B SECC2 10 
SL3SX cA2 0681h 533EB/133 256 N/A ECC B SECC2 8, 10 
SL3V5 cA2 0681h 550E/100 256 N/A ECC B SECC2 8, 10 
SL3N7 cA2 0681h 550E/100 256 N/A ECC B SECC2 10 
SL3NA cA2 0681h 600E/100 256 N/A ECC B SECC2 8, 10 
SL3WC cA2 0681h 750/100 256 N/A ECC B SECC2 
SL3V6 cA2 0681h 750/100 256 N/A ECC B SECC2 8 
SL3Z6 cA2 0681h 800/100 256 N/A ECC B SECC2 
SL3V7 cA2 0681h 800/100 256 N/A ECC B SECC2 8, 10 
SL3WA cA2 0681h 800EB/133 256 N/A ECC B SECC2 10 
SL3V8 cA2 0681h 800EB/133 256 N/A ECC B SECC2 8, 10 
SL4G7 cA2 0681h 800EB/133 256 N/A ECC B SECC2 8, 10 
SL3XG сво 0683h 533EB/133 256 N/A ECG B SECC2 10 


PENTIUMS | PROCESSOR SPECIFICATION UPDATE 


Pentium® Ш Processor Identification and Package Information 


Speed Processor Package 
Core (MHz) L2 Size Tag RAM/ ECC/ Substrate and 

S-Spec | Steppings | CPUID | Core/Bus'"' (Kbytes) | Steppings | Non-ECC Revision Revision Notes 
SL44W cB0 0683h 533EB/133 256 N/A ECG B SECC2 8,10 
SL3XH cB0 0683h 550E/100 256 N/A ECG B SECC2 10 
SL44X cB0 0683h 550E/100 256 N/A ECG B SECC2 8,10 
SL43E cB0 0683h 600E/100 256 N/A ECG B SECC2 10 
SL44Y cB0 0683h 600E/100 256 N/A ЕСС B SECC2 8,10 
SL3XJ cB0 0683h 600EB/133 256 N/A ECG B SECC2 10 
SL44Z cB0 0683h 600EB/133 256 N/A ECG B SECC2 8,10 
SL3XK cB0 0683h 650/100 256 N/A ECG B SECC2 10 
SL452 cB0 0683h 650/100 256 N/A ECG B SECC2 8,10 
SL3XL cB0 0683h 667/133 256 N/A ECG B SECC2 10 
SL453 cB0 0683h 667/133 256 N/A ECG B SECC2 8,10 
SL3XM cB0 0683h 700/100 256 N/A ECG B SECC2 
SL454 cB0 0683h 700/100 256 N/A ECG B SECC2 8 
SL3XN cB0 0683h 733/133 256 N/A ECG B SECC2 
SL455 cB0 0683h 733/133 256 N/A ECG B SECC2 8 
SL3XP cB0 0683h 750/100 256 N/A ECG B SECC2 
SL456 cB0 0683h 750/100 256 N/A ECC B SECC2 8 
SL3XQ сво 0683h 800EB/133 256 N/A ECG B SECC2 10 
SL458 cB0 0683h 800EB/133 256 N/A ECG B SECC2 8,10 
SL3XR cB0 0683h 800/100 256 N/A ECG B SECC2 
SL457 cB0 0683h 800/100 256 N/A ECG B SECC2 8,10 
SL43F cB0 0683h 850/100 256 N/A ECG B SECC2 
SL47M cB0 0683h 850/100 256 N/A ECG B SECC2 8 
SL43G cB0 0683h 866/133 256 N/A ECG B SECC2 
SL47N cB0 0683h 866/133 256 N/A ECG B SECC2 8 
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PENTIUM® Ill PROCESSOR SPECIFICATION UPDATE 


Pentium® Ш Processor Identification and Package Information 


Speed Processor Package 
Core (MHz) L2 Size Tag RAM/ ECC/ Substrate and 
S-Spec | Steppings | CPUID | Core/Bus'"' (Kbytes) | Steppings | Non-ECC Revision Revision Notes 
SL448 сво 0683h 933/133 256 N/A ECC B SECC2 
SL47Q сво 0683h 933/133 256 N/A ECC B SECC2 8 
SL4FP cB0 0683h | 1B GHz/133 256 N/A ECG B SECC2 8,9, 
10 

SL48S cB0 0683h | 1B GHz /133 256 N/A ECC B SECC2 9,10 


РЕМТ МО Ill PROCESSOR SPECIFICATION UPDATE 


Pentium® Ш Processor Identification and Package Information 


Speed Processor Package 
Core (MHz) L2 Size Tag RAW/ ECC/ Substrate and 

S-Spec | Steppings | CPUID | Core/Bus!! (Kbytes) | Steppings | Non-ECC Revision Revision Notes 
SL4C7 cC0 0686h 600E/100 256 N/A ECG C SECC2 10 
SL4C6 cC0 0686h 600EB/133 256 N/A ECG C SECC2 10 
SL4C5 cC0 0686h 650/100 256 N/A ECG C SECC2 
SL4C4 cC0 0686h 667/133 256 N/A ЕСС C SECC2 
SL4C3 cC0 0686h 700/100 256 N/A ECG C SECC2 
SL4C2 cC0 0686h 733/133 256 N/A ECG C SECC2 
SL4KD cC0 0686h 733/133 256 N/A ECG C SECC2 8 
SL4FQ cC0 0686h 733/133 256 N/A ECC C SECC2 8 
SL4BZ cC0 0686h 750/100 256 N/A ECG C SECC2 
SL4BY cC0 0686h 800/100 256 N/A ECG C SECC2 
SL4KF cC0 0686h 800/100 256 N/A ECG C SECC2 8 
SL4BX cC0 0686h 800EB/133 256 N/A ECG C SECC2 10 
SL4G7 cC0 0686h 800EB/133 256 N/A ECG C SECC2 8,10 
SL4KG cC0 0686h 800EB/133 256 N/A ECG C SECC2 8,10 
SL4BW cC0 0686h 850/100 256 N/A ECG C SECC2 
SL4KH cC0 0686h 850/100 256 N/A ECG C SECC2 8 
SL4BV cC0 0686h 866/133 256 N/A ЕСС C SECC2 
SL4KJ cC0 0686h 866/133 256 N/A ECG C SECC2 8 
SL4BT cC0 0686h 933/133 256 N/A ECG C SECC2 15 
SL4KK cC0 0686h 933/133 256 N/A ЕСС C SECC2 8 
SL4BR cC0 0686h 1 GHz/100 256 N/A ECG C SECC2 15 
SL4KL cC0 0686h 1 GHz/100 256 N/A ECG C SECC2 8 
SL4BS cC0 0686h | 1B GHz/133 256 N/A ECC C SECC2 10, 15 
SL4HH cC0 0686h | 1.13 GHz/133 256 N/A ECG C SECC2 12 
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PENTIUM® III PROCESSOR SPECIFICATION UPDATE 


t Unless otherwise noted, all Pentium III processors in S.E.C.C.2 package have an OLGA package core. 
NOTES: 


1. 


eo 


These parts will only operate at the specified core to bus frequency ratio at which they were manufactured and tested. It is 
not necessary to configure the core frequency ratios by using the А2ОМЕ, IGNEE#, LINT[1]/NMI and LINT[O]/INTR pins 
during RESET. 

These processors will not shut down automatically upon assertion of THERMTRIP#. 

This is a boxed processor with an attached heatsink. 

Performance-monitoring event counters do not reflect MOVD and MOVQ stores to memory on these processors. 

These parts will not assert THERMTRIP#, nor will they shut down in the event of an over-temperature condition (e.g., Tj = 
^135? C). 

Pin AJ3 is removed from these parts. 

This is a boxed processor with an unattached fan heatsink. 

This is a boxed processor with an attached fan heatsink. 

These processors will not be validated in Dual Processor (DP) applications. 


The "E" and "B" designators distinguish between Pentium® IIl processors with the same core frequency but different 
system bus frequencies and/or cache implementations. 


B = 133 MHz System Bus 
E = Processors with "Advanced Transfer Cache" (CPUID 068x and greater only if a frequency overlap exists) 


If, for a given core frequency, Pentium Ill processors are only available with one system bus frequency and one cache 
implementation, the above designators will not be used (e.g., not all processors with “Advanced Transfer Cache" will have 
the "E" designation). 


Speeds will be marked as MHz up to but not including 1GHz. Speeds 1GHz and above will have the GHz marking. 

Vcc = 1.80V. Tj = 60?C for this 1.13 GHz processor with CPUID 0686. 

Tj = 80°C, Vcc = 1.70v. 

Vcc = 1.65V. 

Vcc = 1.70V for these cCX core steppings. Tj = 70°C for 1.0 GHz. Tj = 75°C for 933 MHz. 

This SLAWM S-spec part has a VID request of 1.70V, however the processor should be supplied 1.76V at the PGA Vcc 
pins. See Pentium® Ш datasheet for further information. 

Vec=1.75V for сро Core Stepping (CPUID 068Ah). Tj=77 С for 933MHz and Tj=75 С 1GHz. Tj=80 С for 866MHz to 
700MHz. 

This processor is valid for low voltage system bus operation at 1.25V AGTL and normal 1.5V AGTL+ signal levels. This 
processor is also DP capable at the 1.25V AGTL system bus level. Single-ended or differential clock type is automatically 
detected and set accordingly by this processor. 

Vec=1.75V for cDO Core Stepping (CPUID 068Ah). Тсаѕе=64 С for 1GHz. Tcase = 67 C for 1.13GHz. This package 
exists as an FC-PGA2 with Integrated Heat Spreader (IHS). 


in ® 


PENTIUMS | PROCESSOR SPECIFICATION UPDATE 


SUMMARY OF CHANGES 


The following table indicates the Errata, Documentation Changes, Specification Clarifications, or Specification 
Changes that apply to Pentium III processors. Intel intends to fix some of the errata in a future stepping of the 
component, and to account for the other outstanding issues through documentation or specification changes as 
noted. This table uses the following notations: 


CODES USED IN SUMMARY TABLE 


X: Erratum, Documentation Change, Specification Clarification, or Specification 
Change applies to the given processor stepping. 


(No mark) or (blank box): This item is fixed in or does not apply to the given stepping. 


Fix: This erratum is intended to be fixed in a future stepping of the component. 
Fixed: This erratum has been previously fixed. 

NoFix: There are no plans to fix this erratum. 

Doc: Intel intends to update the appropriate documentation in a future revision. 
PKG: This column refers to errata on the Pentium Ill processor substrate. 

AP: APIC related erratum. 

Shaded: This item is either new or modified from the previous version of the document. 


Each Specification Update item is prefixed with a capital letter to distinguish the product. The key below details 
the letters that are used in Intel's microprocessor Specification Updates: 


A = Intel® Pentium® II processor 

B = Intel® Mobile Pentium® II processor 
C = Intel® Celeron™ processor 

D = Intel® Pentium® П Xeon™ processor 
E = Intel® Pentium® Ш processor 

G = Intel® Pentium® Ш Xeon?" processor 


H = Intel® Mobile Celeron™ processor at 466 MHz, 433 MHz, 400 MHz, 366 MHz, 333 MHz, 300 MHz, and 
266MHz 


К = Intel® Mobile Pentium® Ш processor 
M = Intel® Mobile Celeron™ processor at 500 MHz, 450 MHz, and 400A MHz 
N = Intel® Pentium® 4 processor 


The Specification Updates for the Pentium® processor, Pentium® Pro processor, and other Intel products do not 
use this convention. 
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PENTIUM® |! PROCESSOR SPECIFICATION UPDATE 


Summary of Errata 


NO. Кро со Са2 Cb0 ссо | PKG | Plans ERRATA 

E1 Х Х Х Х Х NoFix FP data operand pointer may be incorrectly 
calculated after FP access which wraps 
64-Kbyte boundary in 16-bit code 

E2 x x Х Х Х NoFix | Differences exist in debug exception 
reporting 

E3 X X Х Х X NoFix | FLUSH# servicing delayed while waiting for 
STARTUP_IPI in 2-way MP systems 

E4 x x X X X NoFix | Code fetch matching disabled debug 
register may cause debug exception 

E5 X X X X X NoFix | Double ECC error on read may result in 
BINIT# 

E6 X Х Х Х Х МоНх | ЕР inexact-result exception Пад may not бе 
set 

E7 x x Х Х Х NoFix | BTM for SMI will contain incorrect FROM 
EIP 

E8 Х Х Х Х Х NoFix | ИО restart in SMM may fail after 
simultaneous MCE 

E9 X X X X X NoFix | Branch traps do not function if BTMs are 
also enabled 

E10 X X Fixed Checker BIST failure in FRC mode not 
signaled 

E11 X X Fixed BINIT# assertion causes FRCERR assertion 
in FRC mode 

E12 X X X X X NoFix | Machine check exception handler may not 
always execute successfully 

E13 X X X X X NoFix MCE due to L2 parity error gives L1 
MCACOD.LL 

E14 NoFix | LBER may be corrupted after some events 

E15 NoFix | BTMs may be corrupted during 
simultaneous L1 cache line replacement 

E16 X X X X X NoFix | EFLAGS discrepancy on a page fault after a 
multiprocessor TLB shootdown 

E17 X X X X X NoFix | Near CALL to ESP creates unexpected EIP 
address 

E18 X X X X X NoFix | Memory type undefined for nonmemory 
operations 

E19 X X Fixed Infinite snoop stall during L2 initialization of 
MP systems 

E20 X X X X X NoFix | FP data operand pointer may not be zero 
деди nauis an си ГУлдддї 
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Summary of Errata 


In @ 


NO. Kb0 kC0 Ca2 Cb0 CC0 PKG | Plans ERRATA 

after power on or Reset 

E21 x x Х Х x NoFix | MOVD following zeroing instruction can 
cause incorrect result 

E22 x X Х Х Х МоНх | Premature execution of а load operation 
prior to exception handler invocation 

E23 X X X X X NoFix | Read portion of RMW instruction may 
execute twice 

E24 X X X X X NoFix MC2 STATUS MSR has model-specific 
error code and machine check architecture 
error code reversed 

E25 X X X X X NoFix | Mixed cacheability of lock variables is 
problematic in MP systems 

E26 X X X X X NoFix | MOV with debug register causes debug 
exception 

E27 X X X X X NoFix | Upper four PAT entries not usable with 
Mode B or Mode C paging 

E28 X X X X X NoFix | Data breakpoint exception in a displacement 
relative near call may corrupt EIP 

E29 X X X X X NoFix | RDMSR and WRMSR to invalid MSR may 
not cause GP fault 

E30 X X X X X NoFix | SYSENTER/SYSEXIT instructions can 
implicitly load null segment selector to SS 
and CS registers 

E31 X X X X X NoFix | PRELOAD followed by EXTEST does not 
load boundary scan data 

E32 X X Fixed Far jump to new TSS with D-bit cleared may 
cause system hang 

E33 X X X X X NoFix | INT 1 instruction handler execution could 
generate a debug exception 

E34 X Fixed COMISS/UCOMISS may not update 
EFLAGS under certain conditions 

E35 Fixed Transmission error on cache read 

E36 X X X X NoFix | Potential loss of data coherency during MP 
data ownership transfer 

E37 X X X X X NoFix | Misaligned Locked access to APIC space 
results in hang 

E38 X X Fixed Floating-point exception signal may be 
deferred 

E39 X X X X X NoFix | Memory ordering based synchronization 


may cause a livelock condition in mp 
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PENTIUM® | PROCESSOR SPECIFICATION UPDATE 


NO. Kb0 kC0 Ca2 Cb0 ССО | PKG | Plans ERRATA 

systems 

E40 Х Fixed System bus address parity generator may 
report false AERR# 

E41 X X Х Х X NoFix | System bus ECC not functional with 2:1 
ratio 

E42 Х Х Х Х Х NoFix Processor may assert DRDY# on a write 
with no data 

E43 x x X X X NoFix | GP# fault on WRMSR to 
ROB CR BKUPTMPDR6 

E44 X X X X NoFix | Machine check exception may occur due to 
improper line eviction in the IFU 

E45 X X X Fixed Performance counters include Streaming 
SIMD Extensions L1 prefetch 

E46 NoFix | Snoop request may cause DBSY# hang 

E47 NoFix | Lower bits of SMRAM SMBASE register 
cannot be written with an ITP 

E48 X X X Fixed Task Switch May Cause Wrong PTE and 
PDE Access Bit to be Set 

E49 X X X X X NoFix | Unsynchronized Cross-Modifying code 
operations can cause unexpected 
instruction execution results 

E50 X Fixed Processor will erroneously report a BIST 
failure 

E51 X Fixed Noise sensitivity issue on processor SMI# 
pin 

E52 X Fixed Limitation on cache line ECC detection and 
correction 

E53 X Fixed L2 LD and L2 M LINES OUTM 
performance-monitoring counters do not 
work 

E54 X Fixed IFU/DCU deadlock may cause system hang 

E55 X Fixed L2 DBUS BUSY performance monitoring 
counter will not count writes 

E56 X X Fixed Incorrect sign may occur on X87 result due 
to indefinite QNaN result from streaming 
SIMD extensions multiply 

E57 X X X X NoFix | Deadlock may occur due to illegal- 
instruction/page-miss combination 

E58 X X X X NoFix | MASKMOVOQ instruction interaction with 
string operation may cause deadlock 
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Summary of Errata 


In @ 


NO. Kb0 kC0 Ca2 Cb0 ссо | PKG | Plans ERRATA 
E59 X X Х Х X NoFix | MOVD or CVTSI2SS following zeroing 
instruction can cause incorrect result 
E60 Х Х Х Х Х NoFix | FLUSH# assertion following STPCLK# may 
prevent CPU clocks from stopping 
E61 X Fixed Intermittent failure to assert ADS# during 
processor power-on 
E62 X X X X X NoFix | Floating-point exception condition may be 
deferred 
E63 X Fixed THERMTRIP# may not be asserted as 
specified 
E64 X X NoFix | Cache line reads may result in eviction of 
invalid data. 
E65 X X X X X NoFix | Snoop probe during FLUSH# could cause 
L2 to be left in shared state 
E66 NoFix | Livelock may occur due to IFU line eviction 
E67 X Fixed Selector for the LTR/LLDT register may get 
corrupted 
E68 NoFix INIT does not clear global entries in the TLB 
E69 NoFix VM bit will be cleared on a double fault 
handler 
E70 X X X X X NoFix Memory aliasing with inconsistent A and D 
bits may cause processor deadlock 
E71 X X X X X NoFix Use of memory aliasing with inconsistent 
memory type may cause system hang 
E72 X X X X X NoFix | Processor may report invalid TSS fault 
instead of Double fault during mode C 
paging 
E73 X X X X X NoFix | Machine check exception may occur when 
interleaving code between different memory 
types 
E74 X X X X X NoFix | Wrong ESP register values during a fault in 
VM86 mode 
E75 X X X X X NoFix | APIC ICR write may cause interrupt not to 
be sent when ICR delivery bit pending 
E76 X Fixed High temperature and low supply voltage 
operation may result in incorrect processor 
operation 
E1AP X X X X X NoFix | APIC access to cacheable memory causes 
SHUTDOWN 
E2AP X X X X X NoFix | 2-way MP systems may hang due to 


ааа а МЕРИ NAN 
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Summary of Errata 


NO. Кро со Са2 Cb0 CC0 PKG | Plans ERRATA 
catastrophic errors during BSP 
determination 

E3AP Х Х Х Х Х NoFix | Write to mask LVT (programmed as 


EXTINT) will not deassert outstanding 
interrupt 


* Fix will be only on Pentium® III processors with CPUID=068xh and not CPUID=067xh 


Summary of Documentation Changes 


NO. kBO kC0 cA2 cB0 cC0 PKG | Plans DOCUMENTATION CHANGES 
E1 x x x x x . а 
Doc STPCLK# pin definition 
E2 X X X X X em 
Doc Invalidating caches and TLBs 
ES X X X X X Handling of self-modifying and cross- 
Doc modifying code 
Е4 Х Х Х Х Х Machine check architecture initialization of 
Doc MCi_STATUS registers 
E5 x x x x x | . 
Doc LOCK# signal prefix operands 
E6 Х Х Х Х Х SMRAM state save map contains 
Doc documentation errors 
E7 X X Х Х Х Doc System Management Interrupt (SMI) during 
start-up IPI Clarification 
E8 X X X X X Doc Memory aliasing with different memory 
types 
E9 X X X X X Doc Runbist will not function when STPCLK# 
driven low 
E10 X X X X X Doc Memory aliasing with inconsistent A & D bits 
may cause processor deadlock 
E11 X X X X X Doc An Interrupt may occur while TSS is marked 
busy 
E12 X X X X X Doc NMI unmasked early when processor is 
running in V86 mode 
E13 X X X X X Doc . у 
P6 reads two bytes for POP SEG instruction 
E14 x x X X X Doc APIC register offsets are aligned on 128 bit 
boundaries 
E15 X X X X X Doc Single stepping of instructions breaks out of 
HLT state 
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Summary of Documentation Changes 


NO. кво kC0 cA2 cB0 cC0 PKG | Plans DOCUMENTATION CHANGES 

E16 X X Х Х Х Doc Additional signal resumes execution while in 
a HALT state 

E17 x Х Х Х Х Doc PDPTR Loads are always unchacheable 

E18 X X Х Х X Doc SMI during HALT causes PMC miscount of 
retired instructions 

E19 X X X X X Doc INIT Message is not sent out through APIC 


Summary for Specification Clarifications 


NO. kBO kC0 cA2 cB0 cC0 PKG Plans SPECIFICATION CLARIFICATIONS 
F! Х Х X X X Doc MTRR initialization clarification 

= X Х Х Х Х Doc Floating-point opcode clarification 

E3 Х Х Х Х Х Doc Non-AGTL+ output low current clarification 


Summary of Specification Changes 


NO. kBO kC0 cA2 cB0 cco PKG Plans SPECIFICATION CHANGES 

Bi X X X X X Doc FRCERR pin removed from specification 

= Х Х Х Х Х Doc Non-AGTL+ output leakage current change 

Fš X X X X X Doc RESET# pin definition 

ET X X X X X Doc Non-AGTL+ output low voltage change 

ЕА X X X X X Doc SECC2 processor package height change 
AGTL+ output valid delay change 


E6 
X X X Doc 
E7 Coppermine-256K FC-PGA Vcc transient 
Х Х Doc spec change 
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ERRATA 


E1. FP Data Operand Pointer May Be Incorrectly Calculated After 
FP Access Which Wraps 64-Kbyte Boundary in 16-Bit Code 


Problem: The FP Data Operand Pointer is the effective address of the operand associated with the last non- 
control floating-point instruction executed by the machine. If an 80-bit floating-point access (load or store) occurs 
in a 16-bit mode other than protected mode (in which case the access will produce a segment limit violation), the 
memory access wraps a 64-Kbyte boundary, and the floating-point environment is subsequently saved, the 
value contained in the FP Data Operand Pointer may be incorrect. 


Implication: A 32-bit operating system running 16-bit floating-point code may encounter this erratum, under 
the following conditions: 

e The operating system is using a segment greater than 64 Kbytes in size. 

e An application is running in a 16-bit mode other than protected mode. 

e An 80-bit floating-point load or store which wraps the 64-Kbyte boundary is executed. 


e The operating system performs a floating-point environment store (FSAVE/FNSAVE/FSTENV/FNSTENV) 
after the above memory access. 


e The operating system uses the value contained in the FP Data Operand Pointer. 


Wrapping an 80-bit floating-point load around a segment boundary in this way is not a normal programming 
practice. Intel has not currently identified any software which exhibits this behavior. 


Workaround: If the FP Data Operand Pointer is used in an OS which may run 16-bit floating-point code, care 
must be taken to ensure that no 80-bit floating-point accesses are wrapped around a 64-Kbyte boundary. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E2. Differences Exist in Debug Exception Reporting 


Problem: There exist some differences in the reporting of code and data breakpoint matches between that 
specified by previous Intel processor specifications and the behavior of the processor, as described below: 


Case 1: The first case is for a breakpoint set on a MOVSS or POPSS instruction, when the instruction following 
it causes a debug register protection fault (DR7.gd is already set, enabling the fault). The processor reports 
delayed data breakpoint matches from the MOVSS or POPSS instructions by setting the matching DR6.bi bits, 
along with the debug register protection fault (DR6.bd). If additional breakpoint faults are matched during the call 
of the debug fault handler, the processor sets the breakpoint match bits (DR6.bi) to reflect the breakpoints 
matched by both the MOVSS or POPSS breakpoint and the debug fault handler call. The processor only sets 
DR6.bd in either situation, and does not set any of the DR6.bi bits. 


Case 2: In the second breakpoint reporting failure case, if a MOVSS or POPSS instruction with a data 
breakpoint is followed by a store to memory which: 


a) crosses a 4-Kbyte page boundary, 
OR 
b) causes the page table Access or Dirty (A/D) bits to be modified, 


the breakpoint information for the MOVSS or POPSS will be lost. Previous processors retain this information 
under these boundary conditions. 


Case 3: If they occur after а MOVSS or POPSS instruction, the INTn, INTO, and INT3 instructions zero the 
DR6.bi bits (bits BO through B3), clearing pending breakpoint information, unlike previous processors. 


Case 4: If a data breakpoint and an SMI (System Management Interrupt) occur simultaneously, the SMI will be 
serviced via a call to the SMM handler, and the pending breakpoint will be lost. 


Case 5: When an instruction that accesses a debug register is executed, and a breakpoint is encountered on 
the instruction, the breakpoint is reported twice. 


Case 6: Unlike previous versions of Intel Architecture processors, P6 family processors will not set the Bi bits for 
a matching disabled breakpoint unless at least one other breakpoint is enabled. 


Implication: When debugging or when developing debuggers for a P6 family processor-based system, this 
behavior should be noted. Normal usage of the MOVSS or POPSS instructions (i.e., following them with a MOV 
ESP) will not exhibit the behavior of cases 1-3. Debugging in conjunction with SMM will be limited by case 4. 


Workaround: Following MOVSS and POPSS instructions with a MOV ESP instruction when using 
breakpoints will avoid the first three cases of this erratum. No workaround has been identified for cases 4, 5, or 
6. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E3. FLUSH# Servicing Delayed While Waiting for STARTUP_IPI 
in 2-way MP Systems 


Problem: In a 2-way MP system, if an application processor is waiting for a startup inter-processor interrupt 
(STARTUP_IPI), then it will not service a FLUSH# pin assertion until it has received the STARTUP_IPI. 


Implication: After the 2-way MP initialization protocol, only one processor becomes the bootstrap processor 
(BSP). The other processor becomes a slave application processor (AP). After losing the BSP arbitration, the 
AP goes into a wait loop, waiting for a STARTUP_IPI. 


The BSP can wake up the AP to perform some tasks with a STARTUP_IPI, and then put it back to sleep with an 
initialization inter-processor interrupt (INIT ІРІ, which has the same effect as asserting INIT#), which returns it to 
a wait loop. The result is a possible loss of cache coherency if the off-line processor is intended to service a 
FLUSH# assertion at this point. The FLUSH# will be serviced as soon as the processor is awakened by a 
ЅТАВТОР ІРІ, before any other instructions are executed. Intel has not encountered any operating systems 
that are affected by this erratum. 


Workaround: Operating system developers should take care to execute a WBINVD instruction before the AP 
is taken off-line using an INIT_IPI. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E4. Code Fetch Matching Disabled Debug Register May Cause 
Debug Exception 


Problem: The bits L0-3 and G0-3 enable breakpoints local to a task and global to all tasks, respectively. If one 
of these bits is set, a breakpoint is enabled, corresponding to the addresses in the debug registers DRO-DR3. If 
at least one of these breakpoints is enabled, any of these registers are disabled (i.e., Ln and Gn are 0), and 
RWn for the disabled register is 00 (indicating a breakpoint on instruction execution), normally an instruction 
fetch will not cause an instruction-breakpoint fault based on a match with the address in the disabled register(s). 
However, if the address in a disabled register matches the address of a code fetch which also results in a page 
fault, an instruction-breakpoint fault will occur. 


Implication: While debugging software, extraneous instruction-breakpoint faults may be encountered if 
breakpoint registers are not cleared when they are disabled. Debug software which does not implement a code 
breakpoint handler will fail, if this occurs. If a handler is present, the fault will be serviced. Mixing data and code 
may exacerbate this problem by allowing disabled data breakpoint registers to break on an instruction fetch. 


Workaround: The debug handler should clear breakpoint registers before they become disabled. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


Е5. Double ЕСС Error оп Read May Result in BINIT# 


Problem: For this erratum to occur, the following conditions must be met: 
e Machine Check Exceptions (MCEs) must be enabled. 


e A dataless transaction (such as a write invalidate) must be occurring simultaneously with a transaction 
which returns data (a normal read). 
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e The read data must contain a double-bit uncorrectable ECC error. 


If these conditions are met, the Pentium Ill processor will not be able to determine which transaction was 
erroneous, and instead of generating an MCE, it will generate a BINIT#. 


Implication: The bus will be reinitialized in this case. However, since a double-bit uncorrectable ECC error 
occurred on the read, the MCE handler (which is normally reached on a double-bit uncorrectable ECC error for a 
read) would most likely cause the same BINIT# event. 


Workaround: Though the ability to drive BINIT# can be disabled in the Pentium III processor, which would 
prevent the effects of this erratum, overall system behavior would not improve, since the error which would 
normally cause a BINIT# would instead cause the machine to shut down. No other workaround has been 
identified. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E6. FP Inexact-Result Exception Flag May Not Be Set 


Problem: When the result of a floating-point operation is not exactly representable in the destination format 
(1/8 in binary form, for example), an inexact-result (precision) exception occurs. When this occurs, the PE bit (bit 
5 of the FPU status word) is normally set by the processor. Under certain rare conditions, this bit may not be set 
when this rounding occurs. However, other actions taken by the processor (invoking the software exception 
handler if the exception is unmasked) are not affected. This erratum can only occur if the floating-point operation 
which causes the precision exception is immediately followed by one of the following instructions: 


• FST m32real 
e FST mé4real 
• FSTP m32real 
e  FSTP mé4real 
e ҒТР m80real 
e FIST m16int 
e FIST m32int 
e FISTP mt6int 
° FISTP m32int 
° FISTP më64int 


Note that even if this combination of instructions is encountered, there is also a dependency on the internal 
pipelining and execution state of both instructions in the processor. 


Implication: Inexact-result exceptions are commonly masked or ignored by applications, as it happens 
frequently, and produces а rounded result acceptable to most applications. The РЕ bit of the FPU status word 
may not always be set upon receiving an inexact-result exception. Thus, if these exceptions are unmasked, a 
floating-point error exception handler may not recognize that a precision exception occurred. Note that this is a 
“sticky” bit, i.e., once set by an inexact-result condition, it remains set until cleared by software. 


Workaround: This condition can be avoided by inserting two NOP instructions between the two floating-point 
instructions. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E7. BTM for SMI Will Contain Incorrect FROM EIP 


Problem: A system management interrupt (SMI) will produce a Branch Trace Message (BTM), if BTMs are 
enabled. However, the FROM EIP field of the BTM (used to determine the address of the instruction which was 
being executed when the SMI was serviced) will not have been updated for the SMI, so the field will report the 
same FROM EIP as the previous BTM. 


Implication: A BTM which is issued for an SMI will not contain the correct FROM EIP, limiting the usefulness 
of BTMs for debugging software in conjunction with System Management Mode (SMM). 


Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


EG. VO Restart in SMM May Fail After Simultaneous МСЕ 


Problem: If an I/O instruction (IN, INS, REP INS, OUT, OUTS, or REP OUTS) is being executed, and if the 
data for this instruction becomes corrupted, the Pentium III processor will signal a machine check exception 
(MCE). If the instruction is directed at a device which is powered down, the processor may also receive an 
assertion of SMI#. Since MCEs have higher priority, the processor will call the MCE handler, and the SMI# 
assertion will remain pending. However, upon attempting to execute the first instruction of the MCE handler, the 
SMI# will be recognized and the processor will attempt to execute the SMM handler. If the SMM handler is 
completed successfully, it will attempt to restart the I/O instruction, but will not have the correct machine state, 
due to the call to the MCE handler. 


Implication: A simultaneous MCE and SMI# assertion may occur for one of the I/O instructions above. The 
SMM handler may attempt to restart such an ИО instruction, but will have corrupted state due to the MCE 
handler call, leading to failure of the restart and shutdown of the processor. 


Workaround: If a system implementation must support both SMM and MCEs, the first thing the SMM handler 
code (when ап ИО restart is to be performed) should do is check for a pending MCE. If there is an MCE 
pending, the SMM handler should immediately exit via an RSM instruction and allow the machine check 
exception handler to execute. If there is not, the SMM handler may proceed with its normal operation. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E9. Branch Traps Do Not Function If BTMs Are Also Enabled 


Problem: If branch traps or branch trace messages (BTMs) are enabled alone, both function as expected. 
However, if both are enabled, only the BTMs will function, and the branch traps will be ignored. 


Implication: The branch traps and branch trace message debugging features cannot be used together. 
Workaround: If branch trap functionality is desired, BTMs must be disabled. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E10. Checker BIST Failure in FRC Mode Not Signaled 


Problem: If a system is running in functional redundancy checking (FRC) mode, and the checker of the 
master-checker pair encounters a hard failure while running the built-in self test (BIST), the checker will tri-state 
all outputs without signaling an IERR#. 


Implication: Assuming the master passes BIST successfully, it will continue execution unchecked, operating 
without functional redundancy. However, the necessary pull-up on the FRCERR pin will cause an FRCERR to 
be signaled. The operation of the master depends on the implementation of FRCERR. 


Workaround: For successful detection of BIST failure in the checker of an FRC pair, use the FRCERR signal, 
instead of IERR#. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E11. ВИТЕ Assertion Causes FRCERR Assertion т FRC Mode 


Problem: If a pair of Pentium Ill processors are running in functional redundancy checking (FRC) mode, and a 
catastrophic error condition causes BINIT# to be asserted, the checker in the master-checker pair will enter 
shutdown. The next bus transaction from the master will then result in the assertion of FRCERR. 


Implication: Bus initialization via an assertion of BINIT# occurs as the result of a catastrophic error condition 
which precludes the continuing reliable execution of the system. Under normal circumstances, the master- 
checker pair would remain synchronized in the execution of the BINIT# handler. However, due to this erratum, 
an FRCERR will be signaled. System behavior then depends on the system specific error recovery 
mechanisms. 


Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E12. Machine Check Exception Handler May Not Always Execute 
Successfully 


Problem: An asynchronous machine check exception (MCE), such as a BINIT# event, which occurs during an 
access that splits a 4-Kbyte page boundary, may leave some internal registers in an indeterminate state. Thus, 
the MCE handler code may not always run successfully if an asynchronous MCE has occurred previously. 


Implication: An MCE may not always result in the successful execution of the MCE handler. However, 
asynchronous MCEs usually occur upon detection of a catastrophic system condition that would also hang the 
processor. Leaving MCEs disabled will result in the condition which caused the asynchronous MCE instead 
causing the processor to enter shutdown. Therefore, leaving MCEs disabled may not improve overall system 
behavior. 


Workaround: No workaround which would guarantee successful MCE handler execution under this condition 
has been identified. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E13. MCE Due to L2 Parity Error Gives L1 MCACOD.LL 


Problem: If a Cache Reply Parity (CRP) error, Cache Address Parity (CAP) error, or Cache Synchronous Error 
(CSER) occurs on an access to the Pentium III processor’s L2 cache, the resulting Machine Check Architectural 
Error Code (MCACOD) will be logged with ‘01’ in the LL field. This value indicates an L1 cache error; the value 
should be ‘10’, indicating an L2 cache error. Note that L2 ECC errors have the correct value of ‘10’ logged. 


Implication: An L2 cache access error, other than an ECC error, will be improperly logged as an L1 cache 
error in MCACOD.LL. 


Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E14. LBER May Be Corrupted After Some Events 


Problem: The last branch record (| ВВ) and the last branch before exception record (| ВЕВ) can be used to 
determine the source and destination information for previous branches or exceptions. The LBR contains the 
source and destination addresses for the last branch or exception, and the LBER contains similar information for 
the last branch taken before the last exception. This information is typically used to determine the location of a 
branch which leads to execution of code which causes an exception. However, after a catastrophic bus 
condition which results in an assertion of BINIT# and the re-initialization of the buses, the value in the LBER 
may be corrupted. Also, after either a CALL which results in a fault or a software interrupt, the LBER and LBR 
will be updated to the same value, when the LBER should not have been updated. 


Implication: The LBER and LBR registers are used only for debugging purposes. When this erratum occurs, 
the LBER will not contain reliable address information. The value of LBER should be used with caution when 
debugging branching code; if the values in the LBR and LBER are the same, then the LBER value is incorrect. 
Also, the value in the LBER should not be relied upon after a BINIT# event. 


Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E15. BTMs Мау Be Corrupted During Simultaneous L1 Cache Line 
Replacement 

Problem: When Branch Trace Messages (BTMs) are enabled and such a message is generated, the BTM 

may be corrupted when issued to the bus by the L1 cache if a new line of data is brought into the L1 data cache 

simultaneously. Though the new line being stored in the L1 cache is stored correctly, and no corruption occurs 


in the data, the information in the BTM may be incorrect due to the internal collision of the data line and the 
BTM. 


Implication: Although BTMs may not be entirely reliable due to this erratum, the conditions necessary for this 
boundary condition to occur have only been exhibited during focused simulation testing. Intel has currently not 
observed this erratum in a system level validation environment. 


Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E16. EFLAGS Discrepancy on a Page Fault After a Multiprocessor 
TLB Shootdown 


Problem: This erratum may occur when the Pentium Ill processor executes one of the following read-modify- 
write arithmetic instructions and a page fault occurs during the store of the memory operand: ADD, AND, BTC, 
BTR, BTS, CMPXCHG, DEC, INC, NEG, NOT, OR, ROL/ROR, SAL/SAR/SHL/SHR, SHLD, SHRD, SUB, XOR, 
and XADD. In this case, the EFLAGS value pushed onto the stack of the page fault handler may reflect the 
status of the register after the instruction would have completed execution rather than before it. The following 
conditions are required for the store to generate a page fault and call the operating system page fault handler: 


1. Тһе store address entry must be evicted from the DTLB by speculative loads from other instructions that hit 
the same way of the DTLB before the store has completed. DTLB eviction requires at least three-load 
operations that have linear address bits 15:12 equal to each other and address bits 31:16 different from 
each other in close physical proximity to the arithmetic operation. 


2. The page table entry for the store address must have its permissions tightened during the very small 
window of time between the DTLB eviction and execution of the store. Examples of page permission 
tightening include from Present to Not Present or from Read/Write to Read Only, etc. 


3. Another processor, without corresponding synchronization and TLB flush, must cause the permission 
change. 


Implication: This scenario may only occur on a multiprocessor platform running an operating system that 
performs “lazy” TLB shootdowns. The memory image of the EFLAGS register on the page fault handler’s stack 
prematurely contains the final arithmetic flag values although the instruction has not yet completed. Intel has not 
identified any operating systems that inspect the arithmetic portion of the EFLAGS register during a page fault 
nor observed this erratum in laboratory testing of software applications. 


Workaround: No workaround is needed upon normal restart of the instruction, since this erratum is 
transparent to the faulting code and results in correct instruction behavior. Operating systems may ensure that 
no processor is currently accessing a page that is scheduled to have its page permissions tightened or have a 
page fault handler that ignores any incorrect state. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E17. Near CALL to ESP Creates Unexpected EIP Address 


Problem: As documented, the CALL instruction saves procedure linking information in the procedure stack 
and jumps to the called procedure specified with the destination (target) operand. The target operand specifies 
the address of the first instruction in the called procedure. This operand can be an immediate value, a general- 
purpose register, or a memory location. When accessing an absolute address indirectly using the stack pointer 
(ESP) as a base register, the base value used is the value in the ESP register before the instruction executes. 
However, when accessing an absolute address directly using ESP as the base register, the base value used is 
the value of ESP after the return value is pushed on the stack, not the value in the ESP register before the 
instruction executed. 


Implication: Due to this erratum, the processor may transfer control to an unintended address. Results are 
unpredictable, depending on the particular application, and can range from no effect to the unexpected 
termination of the application due to an exception. Intel has observed this erratum only in a focused testing 
environment. Intel has not observed any commercially available operating system, application, or compiler that 
makes use of or generates this instruction. 


Workaround: If the other seven general-purpose registers are unavailable for use, and it is necessary to do a 
CALL via the ESP register, first push ESP onto the stack, then perform an indirect call using ESP (e.g., CALL 
[ESP]). The saved version of ESP should be popped off the stack after the call returns. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E18. Memory Type Undefined for Nonmemory Operations 


Problem: The Memory Type field for nonmemory transactions such as I/O and Special Cycles are undefined. 
Although the Memory Type attribute for nonmemory operations logically should (and usually does) manifest 
itself as UC, this feature is not designed into the implementation and is therefore inconsistent. 


Implication: Bus agents may decode a non-UC memory type for nonmemory bus transactions. 


Workaround: Bus agents must consider transaction type to determine the validity of the Memory Type field 
for a transaction. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E19. Infinite Snoop Stall During L2 Initialization of MP Systems 


Problem: It is possible for snoop traffic generated on the system bus while a processor is executing its L2 
cache initialization routine to cause the initializing processor to hang. 


Implication: A DP (2-way) system which does not suppress snoop traffic while L2 caches are being initialized 
may hang during this initialization sequence. 


Workaround: The system BIOS can create an execution environment which allows processors to initialize 
their L2 caches without the system generating any snoop traffic on the bus. 


Below is a pseudo-code fragment, designed explicitly for a two-processor system, that uses a serial algorithm to 
initialize each processor's L2 cache: 


Suppress all I/O traffic() 

K = 0; 

while (K <= 1) 

{ 

/* Obtain current value of K. This forces both Temp and K into */ 
/* the Ll cache. Note that Temp could also be maintained in a */ 
/* general purpose register. */ 


Temp = K; 
Wait_until_all_processors_are_signed_in_at_barrier () 
if ( logical_proc_APIC_id == K ) { 


{ 

wait, 10 usecs delay loop(); /* this time delay, required */ 
/* in the worst case, allows */ 
/* the barrier semaphore to */ 
/* settle to shared state. */ 
Initialize L2 cache 

K++ 

} 

else 

while (Temp == K); 

} 

} 


This algorithm prevents bus snoop traffic from the other processors, which would otherwise cause the initializing 
processor to hang. The algorithm assumes that the L1 cache is enabled (the Temp and K variables must be 
cached by each processor). Also, the Memory Type Range Register (MTRR) for the data segment must be set 
to WB (writeback) memory type. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E20. FP Data Operand Pointer May Not Be Zero After Power On or 
Reset 


Problem: The FP Data Operand Pointer, as specified, should be reset to zero upon power on or Reset by the 
processor. Due to this erratum, the FP Data Operand Pointer may be nonzero after power on or Reset. 


Implication: Software which uses the FP Data Operand Pointer and count on its value being zero after power 
on or Reset without first executing an FINIT/FNINIT instruction will use an incorrect value, resulting in incorrect 
behavior of the software. 


Workaround: Software should follow the recommendation in Section 8.2 of the Intel Architecture Software 
Developer's Manual, Volume 3: System Programming Guide (Order Number 243192). This recommendation 
states that if the FPU will be used, software-initialization code should execute an FINIT/FNINIT instruction 
following a hardware reset. This will correctly clear the FP Data Operand Pointer to zero. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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Е21. MOVD Following Zeroing Instruction Can Cause Incorrect 
Result 


Problem: An incorrect result may be calculated after the following circumstances occur: 


A register has been zeroed with either a SUB reg, reg instruction or an XOR reg, reg instruction, 


2. Avalue is moved with sign extension into the same register's lower 16 bits; or a signed integer multiply is 
performed to the same register's lower 16 bits, 


3. This register is then copied to an MMX™ technology register using the MOVD instruction prior to any other 
operations on the sign-extended value. 


Specifically, the sign may be incorrectly extended into bits 16-31 of the MMX technology register. Only the MMX 
technology register is affected by this erratum. 


The erratum only occurs when the three following steps occur in the order shown. The erratum may occur with 
up to 40 intervening instructions that do not modify the sign-extended value between steps 2 and 3. 


1. XOR EAX, EAX 
or SUB EAX, EAX 


2. MOVSX AX, BL 
or MOVSX AX, byte ptr «memory address» or MOVSX AX, BX 
or MOVSX AX, word ptr «memory address» or IMUL BL (AX implicit, opcode F6 /5) 
or IMUL byte ptr «memory address» (AX implicit, opcode F6 /5) or IMUL AX, BX (opcode OF AF /r) 
or IMUL AX, word ptr «memory address» (opcode OF AF /r) or IMUL AX, BX, 16 (opcode 6B /r ib) 
or IMUL AX, word ptr «memory address», 16 (opcode 6B /r ib) or IMUL AX, 8 (opcode 6B /r ib) 
or IMUL AX, BX, 1024 (opcode 69 /r iw) 
or IMUL AX, word ptr «memory address», 1024 (opcode 69 /r iw) or IMUL AX, 1024 (opcode 69 /r iw) 
or CBW 


3. MOVD ММО, EAX 


Note that the values for immediate byte/words are merely representative (i.e., 8, 16, 1024) and that any value in 
the range for the size may be affected. Also, note that this erratum may occur with "EAX" replaced with any 
32-bit general-purpose register, and "AX" with the corresponding 16-bit version of that replacement. "BL" or “BX” 
can be replaced with any 8-bit or 16-bit general-purpose register. The CBW and IMUL (opcode F6 /5) 
instructions are specific to the EAX register only. 


In the example, EAX is forced to contain 0 by the XOR or SUB instructions. Since the four types of the MOVSX 
or IMUL instructions and the CBW instruction modify only bits 15:8 of EAX by sign extending the lower 8 bits of 
EAX, bits 31:16 of EAX should always contain 0. This implies that when MOVD copies ЕАХ to ММО, bits 31:16 
of MMO should also be 0. Under certain scenarios, bits 31:16 of MMO are not 0, but are replicas of bit 15 (the 
16th bit) of AX. This is noticeable when the value in AX after the MOVSX, IMUL, or CBW instruction is negative, 
i.e., bit 15 of AX is a 1. 


When AX is positive (bit 15 of AX is a 0), MOVD will always produce the correct answer. If AX is negative (bit 15 
of AX is a 1), MOVD may produce the right answer or the wrong answer depending on the point in time when 
the MOVD instruction is executed in relation to the MOVSX, IMUL, or CBW instruction. 
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Implication: The effect of incorrect execution will vary from unnoticeable, due to the code sequence 
discarding the incorrect bits, to an application failure. If the MMX technology-enabled application in which MOVD 
is used to manipulate pixels, it is possible for one or more pixels to exhibit the wrong color or position 
momentarily. It is also possible for a computational application that uses the MOVD instruction in the manner 
described above to produce incorrect data. Note that this data may cause an unexpected page fault or general 
protection fault. 


Workaround: There are two possible workarounds for this erratum: 


1. Rather than using the MOVSX-MOVD, IMUL-MOVD, ог CBW-MOVD pairing to handle one variable at a 
time, use the sign extension capabilities (PSRAW, etc.) within MMX technology for operating on multiple 
variables. This would result in higher performance as well. 


2. Insert another operation that modifies or copies the sign-extended value between the MOVSX/IMUL/CBW 
instruction and the MOVD instruction as in the example below: 
XOR EAX, EAX (or SUB EAX, EAX) 
MOVSX АХ, BL (or other MOVSX, other IMUL or CBW instruction) 
*MOV EAX, EAX 
MOVD ММО, EAX 


*Note: MOV EAX, EAX is used here as it is fairly generic. Again, EAX can be any 32-bit register. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E22. Premature Execution of a Load Operation Prior to Exception 
Handler Invocation 


Problem: This erratum can occur with any of the following situations: 


If an instruction that performs a memory load causes a code segment limit violation, 


2. If awaiting floating-point instruction or MMX™ instruction that performs a memory load has a floating-point 
exception pending, or 


3. If an MMX instruction that performs a memory load and has either CRO.EM =1 (Emulation bit set), or a 
floating-point Top-of-Stack (FP TOS) not equal to 0, or a DNA exception pending. 


If any of the above circumstances occur it is possible that the load portion of the instruction will have executed 
before the exception handler is entered. 


Implication: In normal code execution where the target of the load operation is to write back memory there is 
no impact from the load being prematurely executed, nor from the restart and subsequent re-execution of that 
instruction by the exception handler. If the target of the load is to uncached memory that has a system side- 
effect, restarting the instruction may cause unexpected system behavior due to the repetition of the side-effect. 


Workaround: Code which performs loads from memory that has side-effects can effectively workaround this 
behavior by using simple integer-based load instructions when accessing side-effect memory and by ensuring 
that all code is written such that a code segment limit violation cannot occur as a part of reading from side-effect 
memory. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E23. Read Portion of RMW Instruction May Execute Twice 


Problem: When the Pentium III processor executes a read-modify-write (RMW) arithmetic instruction, with 
memory as the destination, it is possible for a page fault to occur during the execution of the store on the 
memory operand after the read operation has completed but before the write operation completes. 


If the memory targeted for the instruction is UC (uncached), memory will observe the occurrence of the initial 
load before the page fault handler and again if the instruction is restarted. 


Implication: This erratum has no effect if the memory targeted for the RMW instruction has no side-effects. If, 
however, the load targets a memory region that has side-effects, multiple occurrences of the initial load may 
lead to unpredictable system behavior. 


Workaround: Hardware and software developers who write device drivers for custom hardware that may 
have a side-effect style of design should use simple loads and simple stores to transfer data to and from the 
device. Then, the memory location will simply be read twice with no additional implications. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E24. MC2 STATUS MSR Has Model-Specific Error Code and 
Machine Check Architecture Error Code Reversed 


Problem: The Intel Architecture Software Developer's Manual, Volume 3: System Programming Guide, 
documents that for the MCi STATUS MSR, bits 15:0 contain the MCA (machine-check architecture) error code 
field, and bits 31:16 contain the model-specific error code field. However, for the MC2 STATUS MSR, these bits 
have been reversed. For the MC2 STATUS MSR, bits 15:0 contain the model-specific error code field and bits 
31:16 contain the MCA error code field. 


Implication: A machine check error may be decoded incorrectly if this erratum on the MC2 STATUS MSR is 
not taken into account. 


Workaround: When decoding the MC2 STATUS MSR, reverse the two error fields. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E25. Mixed Cacheability of Lock Variables Is Problematic in MP 
Systems 


Problem: This errata only affects multiprocessor systems where a lock variable address is marked cacheable 
in one processor and uncacheable in any others. The processors which have it marked uncacheable may stall 
indefinitely when accessing the lock variable. The stall is only encountered if: 


° One processor has the lock variable cached, and is attempting to execute a cache lock. 
e If the processor which has that address cached has it cached in its L2 only. 


e Other processors, meanwhile, issue back to back accesses to that same address on the bus. 


Implication: MP systems where all processors either use cache locks or consistent locks to uncacheable 
space will not encounter this problem. If, however, a lock variable’s cacheability varies in different processors, 
and several processors are all attempting to perform the lock simultaneously, an indefinite stall may be 
experienced by the processors which have it marked uncacheable in locking the variable (if the conditions above 
are satisfied). Intel has only encountered this problem in focus testing with artificially generated external events. 
Intel has not currently identified any commercial software which exhibits this problem. 


Workaround: Follow a homogenous model for the memory type range registers (MTRRs), ensuring that all 
processors have the same cacheability attributes for each region of memory; do not use locks whose memory 
type is cacheable on one processor, and uncacheable on others. Avoid page table aliasing, which may produce 
а nonhomogenous memory model. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E26. MOV With Debug Register Causes Debug Exception 


Problem: When in V86 mode, if a MOV instruction is executed on debug registers, a general-protection 
exception (#GP) should be generated, as documented in the Intel Architecture Software Developer's Manual, 
Volume 3: System Programming Guide, Section 14.2. However, in the case when the general detect enable flag 
(GD) bit is set, the observed behavior is that a debug exception (#DB) is generated instead. 


Implication: With debug-register protection enabled (i.e., the GD bit set), when attempting to execute a MOV 
on debug registers in V86 mode, a debug exception will be generated instead of the expected general-protection 
fault. 


Workaround: In general, operating systems do not set the GD bit when they are in V86 mode. The GD bit is 
generally set and used by debuggers. The debug exception handler should check that the exception did not 
occur in V86 mode before continuing. If the exception did occur in V86 mode, the exception may be directed to 
the general-protection exception handler. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E27. Upper Four PAT Entries Not Usable With Mode B or Mode C 
Paging 


Problem: The Page Attribute Table (PAT) contains eight entries, which must all be initialized and considered 
when setting up memory types for the Pentium Ill processor. However, in Mode B or Mode C paging, the upper 
four entries do not function correctly for 4-Kbyte pages. Specifically, bit 7 of page table entries that translate 
addresses to 4-Kbyte pages should be used as the upper bit of a 3-bit index to determine the PAT entry that 
specifies the memory type for the page. When Mode B (CR4.PSE = 1) and/or Mode C (CR4.PAE) are enabled, 
the processor forces this bit to zero when determining the memory type regardless of the value in the page table 
entry. The upper four entries of the PAT function correctly for 2-Mbyte and 4-Mbyte large pages (specified by bit 
12 of the page directory entry for those translations). 


Implication: Only the lower four PAT entries are useful for 4-KB translations when Mode B or C paging is 
used. In Mode A paging (4-Kbyte pages only), all eight entries may be used. All eight entries may be used for 
large pages in Mode B or C paging. 


Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E28. Data Breakpoint Exception in a Displacement Relative Near 
Call May Corrupt EIP 


Problem: If a misaligned data breakpoint is programmed to the same cache line as the memory 
location where the stack push of a near call is performed and any data breakpoints are enabled, the 
processor will update the stack and ESP appropriately, but may skip the code at the destination of 
the call. Hence, program execution will continue with the next instruction immediately following the 
call, instead of the target of the call. 


Implication: The failure mechanism for this erratum is that the call would not be taken; therefore, 
instructions in the called subroutine would not be executed. As a result, any code relying on the 
execution of the subroutine will behave unpredictably. 


Workaround: Whether enabled or not, do not program a misaligned data breakpoint to the same 
cache line on the stack where the push for the near call is performed. 


Status: For the stepping affected see the Summary of Changes at the beginning of this section. 


E29. RDMSR or WRMSR to Invalid MSR Address May Not Cause 
GP Fault 


Problem: The RDMSR and WRMSR instructions allow reading or writing of MSRs (Model Specific Registers) 
based on the index number placed in ECX. The processor should reject access to any reserved or 
unimplemented MSRs by generating #GP(0). However, there are some invalid MSR addresses for which the 
processor will not generate #GP(0). 


Implication: For RDMSR, undefined values will be read into EDX:EAX. For WRMSR, undefined processor 
behavior may result. 


Workaround: Do not use invalid MSR addresses with RDMSR or WRMSR. 
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Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E30. SYSENTER/SYSEXIT Instructions Can Implicitly Load “Null 
Segment Selector” to SS and CS Registers 


Problem: According to the processor specification, attempting to load a null segment selector into the CS and 
SS segment registers should generate a General Protection Fault (#GP). Although loading a null segment 
selector to the other segment registers is allowed, the processor will generate an exception when the segment 
register holding a null selector is used to access memory. 


However, the SYSENTER instruction can implicitly load a null value to the SS segment selector. This can occur 
if the value in SYSENTER CS MSR is between FFF8h and FFFBh when the SYSENTER instruction is 
executed. This behavior is part of the SYSENTER/SYSEXIT instruction definition; the content of the 
SYSTEM_CS_MSR is always incremented by 8 before it is loaded into the SS. This operation will set the null bit 
in the segment selector if a null result is generated, but it does not generate a #GP on the SYSENTER 
instruction itself. An exception will be generated as expected when the SS register is used to access memory, 
however. 


The SYSEXIT instruction will also exhibit this behavior for both CS and SS when executed with the value in 
SYSENTER_CS_MSR between FFF0h and FFF3h, or between FFE8h and FFEBh, inclusive. 


Implication: These instructions are intended for operating system use. If this erratum occurs (and the OS 
does not ensure that the processor never has a null segment selector in the SS or CS segment registers), the 
processor's behavior may become unpredictable, possibly resulting in system failure. 


Workaround: Do not initialize the SYSTEM_CS_MSR with the values between FFF8h and FFFBh, FFF0h 
and FFF3h, or FFE8h and FFEBh before executing SYSENTER or SYSEXIT. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E31. PRELOAD Followed by EXTEST Does Not Load Boundary 
Scan Data 


Problem: According to the IEEE 1149.1 Standard, the EXTEST instruction would use data “typically loaded 
onto the latched parallel outputs of boundary-scan shift-register stages using the SAMPLE/PRELOAD 
instruction prior to the selection of the EXTEST instruction.” As a result of this erratum, this method cannot be 
used to load the data onto the outputs. 


Implication: Using the PRELOAD instruction prior to the EXTEST instruction will not produce expected data 
after the completion of EXTEST. 


Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E32. Far Jump to New TSS With D-bit Cleared May Cause System 
Hang 


Problem: A task switch may be performed by executing a far jump through a task gate or to a new Task State 
Segment (TSS) directly. Normally, when such a jump to a new TSS occurs, the D-bit (which indicates that the 
page referenced by a Page Table Entry (PTE) has been modified) for the PTE which maps the location of the 
previous TSS will already be set, and the processor will operate as expected. However, if the D-bit is clear at the 
time of the jump to the new TSS, the processor will hang. 


Implication: If an OS is used which can clear the D-bit for system pages, and which jumps to anew TSS ona 
task switch, then a condition may occur which results in a system hang. Intel has not identified any commercial 
software which may encounter this condition; this erratum was discovered in a focused testing environment. 


Workaround: Ensure that OS code does not clear the D-bit for system pages (including any pages that 
contain a task gate or TSS). Use task gates rather than jumping to a new TSS when performing a task switch. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E33. ІМТ 1 Instruction Handler Execution Could Generate a Debug 
Exception 


Problem: If the processor's general detect enable flag is set and an explicit call is made to the interrupt 
procedure via the INT 1 instruction, the general detect enable flag should be cleared prior to entering the 
handler. As a result of this erratum, the flag is not cleared prior to entering the handler. If an access is made to 
the debug registers while inside of the handler, the state of the general detect enable flag will cause a second 
debug exception to be taken. The second debug exception clears the general detect enable flag and returns 
control to the handler which is now able to access the debug registers. 


Implication: This erratum will generate an unexpected debug exception upon accessing the debug registers 
while inside of the INT 1 handler. 


Workaround: Ignore the second debug exception that is taken as a result of this erratum. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E34.  COMISS/UCOMISS May Not Update Eflags Under Certain 


Conditions 
Problem: COMISS/UCOMISS instructions compare the least significant pairs of packed single-precision 
floating-point numbers and set the ZF, PF, and CF bits in the EFLAGS register accordingly (the OF, SF, and AF 


bits are cleared). Under certain conditions when a memory location is loaded into cache, the EFLAGS may not 
get set. 


Implication: The result of the incorrect status of the EFLAGS may range from no effect to an unexpected 
application/OS behavior. 


Workaround: It is possible for BIOS code to contain a workaround for this erratum. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E35. Transmission Error on Cache Read 


Problem: During reads of the L2 cache, the processor may use certain L2 cache optimizations that may result 
in a data transmission error. 


Implication: Data corruption caused by this erratum will result in unpredictable system behavior. 
Workaround: It is possible for BIOS code to contain a workaround for this erratum. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E36. Potential Loss of Data Coherency During MP Data 
Ownership Transfer 


Problem: In MP systems, processors may be sharing data in different cache lines, referenced as line A and 
line B in the discussion below. When this erratum occurs (with the following example given for a 2-way MP 
system with processors noted as "РО" and ‘P1’), PO contains a shared copy of line B in its L1. P1 has a shared 
copy of Line A. Each processor must manage the necessary invalidation and snoop cycles before that processor 
can modify and source the results of any internal writes to the other processor. 


There exists a narrow timing window when, if P1 requests a coy of line B it may be supplied by PO in an 
Exclusive state which allows P1 to modify the contents of the line with no further external invalidation cycles. In 
this narrow window PO may also retire instructions that use the original data present before P1 performed the 
modification 


Implication: Multiprocessor or threaded application synchronization, required for low-level data sharing, that is 
implemented via operating system provided synchronization constructs are not affected by this erratum. 
Applications which rely upon the usage of locked semaphores rather than memory ordering are also unaffected. 
Uniprocessor systems are not affected by this erratum. If the erratum does occur one processor may execute 
software with the stale data that was present from the previous shared state rather than the data written more 
recently by another processor. 


Workaround: Deterministic barriers beyond which program variables will not be modified can be achieved via 
the usage of locked semaphore operations. These should effectively prevent the occurrence of this erratum. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E37. Misaligned Locked Access to APIC Space Results in Hang 


Problem: When the processor's APIC space is accessed with a misaligned locked access a machine check 
exception is expected. However, the processor's machine check architecture is unable to handle the misaligned 
locked access. 


Implication: If this erratum occurs the processor will hang. Typical usage models for the APIC address space 
do not use locked accesses. This erratum will not affect systems using such a model. 


Workaround: Ensure that all accesses to APIC space are aligned. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E38. Floating-Point Exception Signal May Be Deferred 


Problem: A one clock window exists where a pending x87 FP exception that should be signaled on the 
execution of a CVTPS2PI, CVTPI2PS, ог CVTTPS2PI instruction may be deferred to the next waiting floating- 
point instruction or instruction that would change ММХТМ register state. 


Implication: If this erratum occurs the floating-point exception will not be handled as expected. 


Workaround: Applications that follow Intel programming guidelines (empty all x87 registers before executing 
ММХ technology instructions) will not be affected by this erratum. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E39. Memory Ordering Based Synchronization May Cause а 
Livelock Condition in MP Systems 


Problem: In an MP environment, the following sequence of code (or similar code) in two processors (PO and 
P1) may cause them to each enter an infinite loop (livelock condition): 


PO P1 
MOV [xyz], EAX (1) ман: MOV EBX, [abc] (2) 
: CMP EBX, ма! (3) 
JNE ман (4) 
MOV [abc], vall (6) MOV [abc], val2 (5) 


wait0: MOV EBX, [abc] (7) 
CMP EBX, val2 (8) 
JNE wait0 (9) 


NOTE 
The EAX and EBX can be any general-purpose register. Addresses [abc] and 
[xyz] can be any location in memory and must be in the same bank of the L1 
cache. Variables “val1” and “val2” can be any integer. 


The algorithm above involves processors РО and Р1, each of which use loops to keep them synchronized with 
each other. P1 is looping until instruction (6) in P0 is globally observed. Likewise, P0 will loop until instruction (5) 
in P1 is globally observed. 


The P6 architecture allows for instructions (1) and (7) in PO to be dispatched to the L1 cache simultaneously. If 
the two instructions are accessing the same memory bank in the L1 cache, the load (7) will be given higher 
priority and will complete, blocking instruction (1). 


Instructions (8) and (9) may then execute and retire, placing the instruction pointer back to instruction (7). This is 
due to the condition at the end of the “wait0” loop being false. The livelock scenario can occur if the timing of the 
wait0 loop execution is such that instruction (7) in PO is ready for completion every time that instruction (1) tries 
to complete. Instruction (7) will again have higher priority, preventing the data ([xyz]) in instruction (1) from being 
written to the L1 cache. This causes instruction (6) in PO to not complete and the sequence “wait0” to loop 
infinitely in PO. 


A livelock condition also occurs in P1 because instruction (6) in PO does not complete (blocked by instruction (1) 
not completing). The problem with this scenario is that PO should eventually allow for instruction (1) to write its 
data to the L1 cache. If this occurs, the data in instruction (6) will be written to memory, allowing the conditions 
in both loops to be true. 


Implication: Both processors will be stuck in an infinite loop, leading to a hang condition. Note that if PO 
receives any interrupt, the loop timing will be disrupted such that the livelock will be broken. The system timer, a 
keystroke, or mouse movement can provide an interrupt that will break the livelock. 


Workaround: Use a LOCK instruction to force PO to execute instruction (6) before instruction (7). 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E40. System Bus Address Parity Generator May Report False 
AERRZ 


Problem: The processor's address parity error detection circuit may fail to meet its frequency timing 
specification under certain environmental conditions. At the high end of the temperature specification and/or the 
low end of the voltage range, the processor may report false address parity errors. 


Implication: If the system has AERR# drive enabled (bit [3] of the EBL_CR_POWERON resister set to ‘1’) 
spurious address detection and reporting may occur. In some system configurations, BINIT# may be asserted 
on the system bus. This may cause some systems to generate a machine check exception and in others may 
cause a reboot. 


Workaround: Disable AERR# drive from the processor. AERR# drive may be disabled by clearing bit [3] in 
the EBL_CR_POWERON register. In addition, if the chipset allows, AERR# drive should be enabled from the 
chipset and AERR# observation enabled on the processor. AERR# observation on the processor is enabled by 
asserting A8# on the active-to-inactive transition of RESET#. 


Status: For the processor part numbers affected see the “Pentium® III Processor Identification and Packaging 
Information” table in the General Information section. 


E41. System Bus ECC Not Functional With 2:1 Ratio 


Problem: If a processor is underclocked at a core frequency to system bus frequency ratio of 2:1 and system 
bus ECC is enabled, the system bus ECC detection and correction will negatively affect internal timing 
dependencies. 


Implication: If system bus ECC is enabled, and the processor is underclocked at a 2:1 ratio, the system may 
behave unpredictably due to these timing dependencies. 


Workaround: All bus agents that support system bus ECC must disable it when a 2:1 ratio is used. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E42. Processor May Assert DRDY# on a Write With No Data 


Problem: When а МАЗКМОМО instruction is misaligned across a chunk boundary in a way that one chunk 
has a mask of all 0’s, the processor will initiate two partial write transactions with one having all byte enables 
deasserted. Under these conditions, the expected behavior of the processor would be to perform both write 
transactions, but to deassert DRDY# during the transaction which has no byte enables asserted. As a result of 
this erratum, DRDY# is asserted even though no data is being transferred. 


Implication: The implications of this erratum depend on the bus agent’s ability to handle this erroneous 
DRDY# assertion. If a bus agent cannot handle a DRDY# assertion in this situation, or attempts to use the 
invalid data on the bus during this transaction, unpredictable system behavior could result. 


Workaround: A system which can accept a DRDY# assertion during a write with no data will not be affected 
by this erratum. In addition, this erratum will not occur if the МАФКМОУО is aligned. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E43. GP# Fault on WRMSR іо ROB_CR_BKUPTMPDR6 


Problem: Writing a ‘1’ to unimplemented bit(s) in the ROB CR BKUPTMPDR6 MSR (offset 1E0h) will result in 
a general protection fault (GP#). 


Implication: The normal process used to write an MSR is to read the MSR using RDMSR, modify the bit(s) of 
interest, and then to write the MSR using WRMSR. Because of this erratum, this process may result in a GP# 
fault when used to modify the ROB CR. BKUPTMPDR6 MSR. 


Workaround: When writing го ROB СВ BKUPTMPDR6 all unimplemented bits must be ‘0.’ Implemented bits 
may be set as ‘0’ or ‘1’ as desired. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E44. Machine Check Exception May Occur Due to Improper Line 
Eviction in the IFU 


Problem: The Pentium Ill processor is designed to signal an unrecoverable Machine Check Exception (MCE) 
as a consistency checking mechanism. Under a complex set of circumstances involving multiple speculative 
branches and memory accesses there exists a one cycle long window in which the processor may signal a MCE 
in the Instruction Fetch Unit (IFU) because instructions previously decoded have been evicted from the IFU. The 
one cycle long window is opened when an opportunistic fetch receives a partial hit on a previously executed but 
not as yet completed store resident in the store buffer. The resulting partial hit erroneously causes the eviction 
of a line from the IFU at a time when the processor is expecting the line to still be present. If the MCE for this 
particular IFU event is disabled, execution will continue normally. 


Implication: While this erratum may occur on a system with any number of Pentium Ill processors, the 
probability of occurrence increases with the number of processors. If this erratum does occur, a machine check 
exception will result. Note systems that implement an operating system that does not enable the Machine Check 
Architecture will be completely unaffected by this erratum (e.g., Windows* 95 and Windows 98). 


Workaround: It is possible for BIOS code to contain a workaround for this erratum. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E45. Performance Counters Include Streaming SIMD Extensions 
L1 Prefetch 


Problem: The processor allows the measurement of the frequency and duration of numerous different internal 
and bus related events (see Intel Architecture Software Developer's Manual, Volume 3, for more details). The 
Streaming SIMD Extension (SSE) architecture provides a mechanism to pre-load data into the L1 cache, 
bypassing the L2 cache. The number of these L1 pre-loads measured by the performance monitoring logic will 
incorrectly be included in the count of "L2 LINES IN" (24H) events and "L2 LINES OUT" (26H) events. 


Implication: If application software is run which utilizes the SSE L1 prefetch feature, the count of 
"L2 LINES IN" (24H) and "L2 LINES OUT" (26H) will read a value that is greater than the correct value. 


Workaround: The correct value of 12 LINES IN" and "L2 LINES OUT" may be calculated by subtracting 
the value of the "MMX PRE MISS" (4BH) from each of these registers. 
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Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E46. Snoop Request May Cause DBSY# Hang 


Problem: A small window of time exists in which a snoop request originating from a bus agent to a processor 
with one or more outstanding memory transactions may cause the processor to assert DBSY# without issuing a 
corresponding bus transaction, causing the processor to hang (livelock). The exact circumstances are complex, 
and include the relative timing of internal processor functions with the snoop request from a bus agent. 


Implication: This erratum may occur on a system with any number of processors. However, the probability of 
occurrence increases with the number of processors. If this erratum does occur, the system will hang with 
DBSY# asserted. At this point, the system requires a hard reset. 


Workaround: It is possible for BIOS code to contain a workaround for this erratum. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E47. Lower Bits of SMRAM SMBASE Register Cannot Be Written 
With an ITP 


Problem: The System Management Base (SMBASE) register (7EF8H) stores the starting address of the 
System Management RAM (SMRAM). This register is used by the processor when it is in System Management 
Mode (SMM), and its contents serve as the memory base for code execution and data storage. The 32-bit 
SMBASE register can normally be programmed to any value. When programmed with an In-Target Probe (ITP), 
however, any attempt to set the lower 11 bits of SMBASE to anything other than zeros via the WRMSR 
instruction will cause the attempted write to fail. 


Implication: When set via ITP, any attempt to relocate SMRAM space must be made with 2-KB alignment. 
Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E48. Task Switch Caused by Page Fault May Cause Wrong PTE 
and PDE Access Bit to Be Set 


Problem: If an operating system executes a task switch via a Task State Segment (TSS), and the TSS is 
wholly or partially located within a clean page (A and D bits clear) and the GDT entry for the new TSS is either 
misaligned across a cache line boundary or is in a clean page, the accessed and dirty bits for an incorrect page 
table/directory entry may be set. 


Implication: An operating system which uses hardware task switching (or hardware task management) may 
encounter this erratum. The effect of the erratum depends on the alignment of the TSS and ranges from no 
anomalous behavior to unexpected errors. 


Workaround: The operating system could align all TSSs to be within page boundaries and set the A and D 
bits for those pages to avoid this erratum. The operating system may alternately use software task 
management. 


Status: For the stepping affected see the Summary of Changes at the beginning of this section. 
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E49. Unsynchronized Cross-Modifying Code Operations Can 
Cause Unexpected Instruction Execution Results 
Problem: The act of one processor, or system bus master, writing data into a currently executing code 
segment of a second processor with the intent of having the second processor execute that data as code is 


called cross-modifying code (XMC). XMC that does not force the second processor to execute a synchronizing 
instruction, prior to execution of the new code, is called unsynchronized XMC. 


Software using unsynchronized XMC to modify the instruction byte stream of a processor can see unexpected 
instruction execution from the processor that is executing the modified code. 


Implication: In this case, the phrase "unexpected execution behavior" encompasses the generation of most of 
the exceptions listed in the Intel Architecture Software Developer's Manual Volume 3: System Programming 
Guide, including a General Protection Fault (GPF). In the event of a GPF the application executing the 
unsynchronized XMC operation would be terminated by the operating system. 


Workaround: In order to avoid this erratum, programmers should use the XMC synchronization algorithm as 
qetailed in the Intel Architecture Software Developer's Manual Volume 3: System Programming Guide, Section 
7.1.3. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E50. Processor Will Erroneously Report a BIST Failure 


Problem: If the processor performs BIST at power-up, the ЕАХ register is normally cleared (ОН) when the 
processor passes. The processor will erroneously report a non-zero value (signaling a BIST failure) even if 
BIST passes. 


Implication: The processor will incorrectly signal an error after BIST is performed. 
Workaround: The system BIOS should ignore the BIST results in the EAX register. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E51. Noise Sensitivity Issue on Processor SMI# Pin 


Problem: Post silicon characterization has demonstrated a greater than expected sensitivity to noise on the 
processor's SMI# input, which may result in spurious SMI# interrupts. 


Implication: BIOS/SMM code that is capable of handling spurious SMI events will report a spurious SMI#, but 
should not be negatively impacted by this erratum. Systems whose BIOS code cannot handle spurious SMI 
events may fail, resulting in a system hang or other anomalous behavior. 


Spurious SMI# interrupts should be controlled on the system board regardless of BIOS implementation. 


Workaround: Possible workarounds that may reduce or eliminate the occurrence of the spurious SMI# 
interrupts include: 


1. Use а lower effective pull-up resistance on the SMI# pin. This resistor must meet the specifications of the 
component driving the ЗМ! signal. 


2. Externally condition the SMI# signal prior to providing it to the processor's SMI pin. 
These workarounds should be evaluated on a design-by-design basis. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E52. Limitation On Cache Line ECC Detection and Correction 


Problem: ECC can detect and correct up to four single-bit ECC errors per cache line. However, the processor 
will only detect and correct one single-bit ECC error per cache line. While all ECC errors will be detected, 
multiple single bit errors will be incorrectly reported as uncorrectable double bit errors, rather than correctable 
single bit errors. 


Implication: The processor may report fewer single bit ECC errors and more double bit ECC errors than 
previous processors. 


Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E53. L2 LDand L2 M LINES OUTM Performance-Monitoring 
Counters Do Not Work 


Problem: The L2 LD (29H) and L2 M LINES OUTM (27H) Performance-Monitoring counters are used to 
monitor L2 cache line activity. These counters incorrectly count their respective events. 


Implication: These counters will report incorrect data. 
Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E54.  IFU/DCU Deadlock May Cause System Hang 


Problem: An internal deadlock situation may occur in systems with multiple bus agents, with a failure signature 
such that a processor either asserts DBSY# without issuing the corresponding data, or fails to respond to a 
snoop request from another bus agent. Should this erratum occur, the affected processor ceases code 
execution and the system will hang. 


The specific circumstances surrounding the occurrence of this erratum are: 


1. A locked operation to the Data Cache Unit (DCU) is in process. 

2. Asnoop occurs, but cannot complete due to the ongoing locked operation. 

3. The presence of the snoop prevents pending Instruction Fetch Unit (IFU) requests from completing. 
4. The FU requests are periodically restarted. 


The continued IFU restart attempts create additional DCU snoops, which prevent the in-process locked 
operation from completing, keeping the DCU locked. 


Implication: The system may hang. 
Workaround: It is possible for BIOS code to contain a workaround for this erratum. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E55. L2 DBUS BUSY Performance Monitoring Counter Will Not 
Count Writes 


Problem: The L2 DBUS BUSY (22H) performance monitoring counter is intended to count the number of 
cycles during which the L2 data bus is in use. For some steppings of the processor, the L2 DBUS BUSY 
counter will not be incremented during write cycles and therefore will only reflect the number of L2 data bus 
cycles resulting from cache reads. 


Implication: The L2 DBUS BUSY event counts only L2 read cycles. 
Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E56. Incorrect Sign May Occur On X87 Result Due To Indefinite 
QNaN Result From Streaming SIMD Extensions Multiply 


Problem: It is possible that a negative sign bit may be incorrectly applied to the result of an X87 floating-point 
operation if it is closely preceded by a Streaming SIMD Extensions (SSE) multiply operation. In order for this 
erratum to occur, the Streaming SIMD Extensions multiply operation must result in an Indefinite Quiet Not-a- 
Number (QNaN). Operations such as multiplying zero by infinity will result in an Indefinite QNaN result. 


Implication: If this erratum occurs, the result of an X87 floating-point instruction, which should be positive, will 
instead be negative. 


Workaround: It is possible for BIOS code to contain a workaround for this erratum. 
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Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E57. Deadlock May Occur Due To lllegal-Instruction/Page-Miss 
Combination 


Problem: Intel's 32-bit Instruction Set Architecture (ISA) utilizes most of the available op-code space; however 
some byte combinations remain undefined and are considered illegal instructions. Intel processors detect the 
attempted execution of illegal instructions and signal an exception. This exception is handled by operating 
system and/or application software. 


Under a complex set of internal and external conditions involving illegal instructions, a deadlock may occur 
within the processor. The necessary conditions for the deadlock involve: 


1. Execution of the illegal instruction. 
2. Тмо-раде table walks occur within a narrow timing window coincident with the illegal instruction. 


Implication: The illegal instructions involved in this erratum are unusual and invalid byte combinations that are 
not useful to application software or operating systems. These combinations are not normally generated in the 
course of software programming, nor are such sequences known by Intel to be generated in commercially 
available software and tools. Development tools (compilers, assemblers) do not generate this type of code 
sequence, and will normally flag such a sequence as an error. If this erratum occurs, the processor deadlock 
condition will occur and result in a system hang. Code execution cannot continue without a system RESET. 


Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E58. MASKMOVOQ Instruction Interaction with String Operation 
May Cause Deadlock 


Problem: Under the following scenario, combined with a specific alignment of internal events, the processor 
may enter a deadlock condition: 


1. A store operation completes, leaving a write-combining (WC) buffer partially filled. 
2. The target of a subsequent MASKMOVQ instruction is split across a cache line. 
3. The data in (2) above results in a hit to the data in the WC buffer in (1). 


Implication: If this erratum occurs, the processor deadlock condition will occur and result in a system hang. 
Code execution cannot continue without a system RESET. 


Workaround: It is possible for BIOS code to contain a workaround for this erratum. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E59. MOVD or CVTSI2SS Following Zeroing Instruction Can 
Cause Incorrect Result 


Problem: An incorrect result may be calculated after the following circumstances occur: 


A register has been zeroed with either a SUB reg, reg instruction, or an XOR reg, reg instruction. 


2. A value is moved with sign extension into the same register's lower 16 bits; or a signed integer 
multiply is performed to the same register’s lower 16 bits. 


3. Тһе register is then copied to an MMX™ technology register using the MOVD, or converted to single 
precision floating-point and moved to an MMX technology register using the CVTSI2SS instruction 
prior to any other operations on the sign-extended value. 


Specifically, the sign may be incorrectly extended into bits 16-31 of the MMX technology register. This erratum 
only affects the MMX technology register. 


This erratum only occurs when the following three steps occur in the order shown. This erratum may occur with 
up to 40 intervening instructions that do not modify the sign-extended value between steps 2 and 3. 
1. XOR EAX, EAX 
or SUB EAX, EAX 


2. MOVSX AX, BL 
or MOVSX AX, byte ptr <memory address> or MOVSX AX, BX 
or MOVSX AX, word ptr «memory address> or МИ. BL (AX implicit, opcode F6 /5) 
or IMUL byte ptr <memory address> (AX implicit, opcode F6 /5) or IMUL AX, BX (opcode 0F AF /r) 
or IMUL AX, word ptr <memory address> (opcode 0F AF /r) or IMUL AX, BX, 16 (opcode 6B /r ib) 
or IMUL AX, word ptr <memory address>, 16 (opcode 6B /r ib) or IMUL AX, 8 (opcode 6B /r ib) 
or IMUL AX, BX, 1024 (opcode 69 /r iw) 
or IMUL AX, word ptr <memory address>, 1024 (opcode 69 /r iw) 
or IMUL AX, 1024 (opcode 69 /r iw) or CBW 


3. MOVD ММО, EAX ог CVTSI2SS MMO, EAX 


Note that the values for immediate byte/words are merely representative (i.e., 8, 16, 1024) and that any value in 
the range for the size is affected. Also, note that this erratum may occur with “EAX” replaced with any 32-bit 
general-purpose register, and “AX” with the corresponding 16-bit version of that replacement. “BL” or “BX” can 
be replaced with any 8-bit or 16-bit general-purpose register. The CBW and IMUL (opcode F6 /5) instructions 
are specific to the EAX register only. 


In the above example, EAX is forced to contain 0 by the XOR or SUB instructions. Since the four types of the 
MOVSX or IMUL instructions and the CBW instruction only modify bits 15:8 of EAX by sign extending the lower 
8 bits of EAX, bits 31:16 of EAX should always contain 0. This implies that when MOVD or CVTSI2SS copies 
EAX to ММО, bits 31:16 of ММО should also be 0. In certain scenarios, bits 31:16 of ММО are not 0, but are 
replicas of bit 15 (the 16th bit) of AX. This is noticeable when the value in AX after the MOVSX, IMUL or CBW 
instruction is negative (i.e., bit 15 of AX is a 1). 


When AX is positive (bit 15 of AX is 0), MOVD or CVTSI2SS will produce the correct answer. If AX is negative 
(bit 15 of AX is 1), MOVD ог CVTSI2SS may produce the right answer or the wrong answer, depending оп the 
point in time when the MOVD or CVTSI2SS instruction is executed in relation to the MOVSX, IMUL or CBW 
instruction. 


Implication: The effect of incorrect execution will vary from unnoticeable, due to the code sequence 
discarding the incorrect bits, to an application failure. 


Workaround: There are two possible workarounds for this erratum: 
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1. Rather than using the MOVSX-MOVD/CVTSI2SS, IMUL-MOVD/CVTSI2SS ог CBW- 
MOVD/CVTSI2SS pairing to handle one variable at a time, use the sign extension capabilities 
(PSRAW, etc.) within MMX technology for operating on multiple variables. This will also result in 
higher performance. 


2. Insert another operation that modifies or copies the sign-extended value between the 
MOVSX/IMUL/CBW instruction and the MOVD or CVTSI2SS instruction as in the example below: 
XOR EAX, EAX (or SUB EAX, EAX) 
MOVSX AX, BL (or other MOVSX, other IMUL or CBW instruction) 
*MOV EAX, EAX 
MOVD ММО, ЕАХ or CVTSI2SS ММО, EAX 


*Note: MOV EAX, EAX is used here in a generic sense. Again, EAX can be substituted with any 32-bit register. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E60. FLUSH# Assertion Following STPCLK# May Prevent CPU 
Clocks From Stopping 
Problem: If FLUSH# is asserted after STPCLK# is asserted, the cache flush operation will not occur until after 


STPCLK# is de-asserted. Furthermore, the pending flush will prevent the processor from entering the Sleep 
state, since the flush operation must complete prior to the processor entering the Sleep state. 


Implication: Following SLP# assertion, processor power dissipation may be higher than expected. 
Furthermore, if the source to the processor's input bus clock (BCLK) is removed, normally resulting in a 
transition to the Deep Sleep state, the processor may shutdown improperly. The ensuing attempt to wake up the 
processor will result in unpredictable behavior and may cause the system to hang. 


Workaround: For systems that use the FLUSH# input signal and Deep Sleep state of the processor, ensure 
that FLUSH# is not asserted while STPCLK# is asserted. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E61. Intermittent Failure to Assert ADS# During Processor 
Power-On 


Problem: Under a system specific set of initial parametric conditions, a very small number of Pentium® III 
processors (CPUID 068xh) may be susceptible to entering an internal test mode during processor power-on. 
The symptom of this test mode is a failure to assert ADS# during a processor power-on. 


Implication: On susceptible platforms, when power is applied to the processor, there is a possibility that the 
processor will occasionally enter the test mode rather than initiate a system boot sequence. 


Workaround: A subsequent processor Power-Off then Power-On cycle should remove the processor from this 
test mode, allowing normal processor operation to resume. The following workaround also may reduce the 
occurrence of the failure condition: 


SC242-based platform designs in which VTT leads the processor input voltage may reduce the 
occurrence of the erratum by connecting SC242 pin B20 (RESERVED) to pin B9 (МТТ). 


PGA370-based platform designs in which VTT leads the processor input voltage can reduce the 
occurrence of the erratum by connecting pin G37 (RESERVED) to motherboard VTT or short the 
PGA370 socket pin G37 to AH20 ог G35 (both VTT). 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E62. Floating-Point Exception Condition May be Deferred 


Problem: A floating-point instruction that causes a pending floating-point exception (ES=1) is normally 
signaled by the processor on the next waiting FP/MMX™ technology instruction. In the following set of 
circumstances, the exception may be delayed or the FSW register may contain a wrong value: 


1. The excepting floating-point instruction is followed by an instruction that accesses memory across а 
page (4-Kbyte) boundary or its access results in the update of a page table dirty/access bit. 


2. The memory accessing instruction is immediately followed by a waiting floating-point or MMX 
technology instruction. 


3. Тһе waiting floating-point or MMX technology instruction retires during a one-cycle window that 
coincides with a sequence of internal events related to instruction cache line eviction. 


Implication: The floating-point exception will not be signaled until the next waiting floating-point/MMX 
technology instruction. Alternatively it may be signaled with the wrong TOS and condition code values. This 
erratum has not been observed in any commercial software applications. 


Workaround: None identified 


Status: For the stepping affected see the Summary of Changes at the beginning of this section. 
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E63. THERMTRIP# May Not be Asserted as Specified 


Problem: THERMTRIP# is a signal on the Pentium? III processor that is asserted when the core reaches а 
critical temperature during operation as detailed in the processor specification. The Pentium? III processor may 
not assert THERMTRIP# until a much higher temperature than the one specified is reached. 


Implication: The THERMTRIP# feature is not functional on the Pentium? III processor. Note that this erratum 
can only occur when the processor is running with a TPLATE temperature over the maximum specification of 
75? C. 


Workaround: Avoid operation of the Pentium Ill processor outside of the thermal specifications defined by the 
processor specifications. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E64. | Cache Line Reads May Result in Eviction of Invalid Data 
Problem: A small window of time exists in which internal timing conditions in the processor cache logic may 
result in the eviction of an L2 cache line marked in the invalid state. 

Implication: There are three possible implications of this erratum: 

1. The processor may provide incorrect L2 cache line data by evicting an invalid line. 

2. ABNRI (Block Next Request) stall may occur on the system bus. 


3. Should a snoop request occur to the same cache line in a small window of time the processor may 
incorrectly assert HITM#. It is then possible for an infinite snoop stall to occur should another processor 
respond (correctly) to the snoop request with HIT#. In order for this infinite snoop stall to occur, at least 
three agents must be present, and the probability of occurrence increases with the number of processors. 
Should 2 or 3 occur, the processor will eventually assert BINIT# (if enabled) with an MCA error code 
indicating a ROB time-out. At this point, the system requires a hard reset. 


Workaround: It is possible for BIOS code to contain a workaround for this erratum. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E65. Snoop probe during FLUSH# could cause L2 to be left in 
shared state 


Problem: During a L2 FLUSH operation using the FLUSH# pin, it is possible that a read request from a bus 
agent or other processor to a valid line will leave the line in the Shared state (S) instead of the Invalid state (1) as 
expected after flush operation. Before the FLUSH operation is completed, another snoop request to invalidate 
the line from another agent or processor could be ignored, again leaving the line in the Shared state. 


Implication: Current desktop and mid range server systems have no mechanism to assert the flush pin and 
hence are not affected by this erratum. A high-end server system that does not suppress snoop traffic before the 
assertion of the FLUSH# pin may cause a line to be left in an incorrect cache state. 


Workaround: Affected sytems (those capable of asserting the FLUSH# pin) should prevent snoop activity on 
the front side bus until invalidation is completed after asserting FLUSH#, or use a WBINVD instruction instead of 
asserting the FLUSH# pin in order to flush the cache. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E66. Livelock May Occur Due to IFU Line Eviction 


Problem: Following the conditions outlined for erratum E44, if the instruction that is currently being executed 
from the evicted line must be restarted by the IFU, and the IFU receives another partial hit on a previously 
executed (but not as yet completed) store that is resident in the store buffer, then a livelock may occur. 


Implication: If this erratum occurs, the processor will hang in a live lock-situation, and the system will require 
a reset to continue normal operation. 


Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E67. Selector for the LTR/LLDT Register May Get Corrupted 


Problem: The internal selector portion of the respective register (TR, LDTR) may get corrupted, if during a 
small window of LTR or LLDT system instruction execution, the following sequence of events occur: 


1. Speculative write to a segment register that might follow the LTR or LLDT instruction 


2. Тһе read segment descriptor of LTR/LLDT operation spans а page (4 Kbytes) boundary; or causes 
a page fault 
Implication: Incorrect selector for LTR, LLDT instruction could be used after a task switch. 
Workaround: Software can insert a serializing instruction between the LTR or LLDT instruction and the 
segment register write. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E68. INIT Does Not Clear Global Entries in the TLB 


Problem: INIT may not flush a TLB entry when: 


1. The processor is in protected mode with paging enabled and the page global enable flag is set (PGE 
bit of CR4 register) 


2. G bit for the page table entry is set 
3. TLB entry is present in TLB when INIT occurs 


Implication: Software may encounter unexpected page fault or incorrect address translation due to a TLB 
entry erroneously left in TLB after INIT. 


Workaround: Write to CR3, CR4 or CRO registers before writing to memory early in BIOS code to clear all the 
global entries from TLB. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E69. VM Bit will be Cleared on a Double Fault Handler 


Problem: Following a task switch to a Double Fault Handler that was initiated while the processor was in 
virtual-8086 (VM86) mode, the VM bit will be incorrectly cleared in EFLAGS. 


Implication: When the OS recovers from the double fault handler, the processor will no longer be in VM86 
mode. 


Workaround: None identified 


Status: For the steppings affected see the Summary of Errata at the beginning of this section. 


E70. | Memory Aliasing with Inconsistent A and D Bits may Cause 
Processor Deadlock 


Problem: In the event that software implements memory aliasing by having two Page Directory Entries (PDEs) 
point to a common Page Table Entry (PTE) and the Accessed and Dirty bits for the two PDEs are allowed to 
become inconsistent the processor may become deadlocked. 


Implication: This erratum has not been observed with commercially available software. 


Workaround: Software that needs to implement memory aliasing in this way should manage the consistency 
of the Accessed and Dirty bits. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E71. Use of Memory Aliasing with Inconsistent Memory Type 

May Cause System Hang 
Problem: Software that implements memory aliasing by having more than one lineare addresses mapped to 
the same physical page with different cache types may cause the system to hang. This would occur if one of the 
addresses is non-cacheable used in code segment and the other a cacheable address. If the cacheable 
address finds its way in instruction cache, and non-cacheable address is fetched in IFU, the processor may 


invalidate the non-cacheable address from the fetch unit. Any micro-architectural event that causes instruction 
restart will expect this instruction to still be in fetch unit and lack of it will cause system hang. 


Implication: This erratum has not been observed with commercially available software. 


Workaround: Although it is possible to have a single physical page mapped by two different linear addresses 
with different memory types, Intel has strongly discouraged this practice as it may lead to undefined results. 
Software that needs to implement memory aliasing should manage the memory type consistency. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E72. Processor may Report Invalid TSS Fault Instead of Double 
Fault During Mode C Paging 

Problem: When an operating system executes a task switch ма а Task State Segment (TSS) the СВЗ register 

is always updated from the new task TSS. In the mode C paging, once the CR3 is changed the processor will 

attempt to load the PDPTRs. If the CR3 from the target task TSS or task switch handler TSS is not valid then the 


new PDPTR will not be loaded. This will lead to the reporting of invalid TSS fault instead of the expected 
Double fault. 


Implication: Operating systems that access an invalid TSS may get invalid TSS fault instead of a Double fault. 
Workaround: Software needs to ensure any accessed TSS is valid. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E73. | Machine Check Exception May Occur When Interleaving 
Code Between Different Memory Types 
Problem: A small window of opportunity exists where code fetches interleaved between different memory 


types may cause a machine check exception. A complex set of micro-architectural boundary conditions is 
required to expose this window. 


Implication: Interleaved instruction fetches between different memory types may result in a machine check 
exception. The system may hang if machine check exceptions are disabled. Intel has not observed the 
occurrence of this erratum while running commercially available applications or operating systems. 


Workaround: Software can avoid this erratum by placing a serializing instruction between code fetches 
between different memory types. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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Е74. Wrong ESP Register Values During a Fault in VM86 Mode 


Problem: At the beginning of the IRET instruction execution in VM86 mode, the lower 16 bits of the ESP 
register are saved as the old stack value. When a fault occurs, these 16 bits are moved into the 32-bit ESP, 
effectively clearing the upper 16 bits of the ESP. 


Implication: This erratum has not been observed to cause any problems with commercially available 
software. 


Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E75. APIC ICR Write May Cause Interrupt Not to be Sent When 
ICR Delivery Bit Pending 
Problem: If the APIC ICR (Interrupt Control Register) is written with a new interrupt command while the 


Delivery Status bit from a previous interrupt command is set to '1' (Send Pending), the interrupt message may 
not be sent out by the processor. 


Implication: This erratum will cause an interrupt message not to be sent, potentially resulting in system hang. 


Workaround: Software should always poll the Delivery Status bit in the APIC ICR and ensure that it is '0' 
(Idle) before writing a new value to the ICR. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E76. High Temperature and Low Supply Voltage Operation May 
Result in Incorrect Processor Operation 


Problem: When operating at the high temperature, low supply voltage corner of the processor specification, if 
there is a store pending in the processor’s fill buffer, and simultaneously a load operation misses the L1 cache 
but results in a hit to the L2 cache, then it is possible that incorrect data may be returned to satisfy the load 
operation. 


Implication: When this erratum is encountered, unpredictable software behavior may occur. It can be seen 
from the table of affected steppings that this erratum is constrained to a single stepping and is only possible in 
processors operating at frequencies of 933MHz and above and is not present in all of those processors. 
Application of the workaround will prevent occurrence of the erratum in all processors of that stepping. 


Workaround: It is possible for BIOS code to contain a workaround for this erratum. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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E1AP. APIC Access to Cacheable Memory Causes SHUTDOWN 


Problem: APIC operations which access memory with any type other than uncacheable (UC) are illegal. If an 
APIC operation to a memory type other than UC occurs and Machine Check Exceptions (MCEs) are disabled, 
the processor will enter shutdown after such an access. If MCEs are enabled, an MCE will occur. However, in 
this circumstance, a second MCE will be signaled. The second MCE signal will cause the Pentium Ш processor 
to enter shutdown. 


Implication: Recovery from a PIC access to cacheable memory will not be successful. Software that accesses 
only UC type memory during APIC operations will not encounter this erratum. 


Workaround: Ensure that the memory space to which PIC accesses can be made is marked as type UC 
(uncacheable) in the memory type range registers (MTRRs) to avoid this erratum. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E2AP. 2-Way MP Systems May Hang Due to Catastrophic Errors 
During BSP Determination 
Problem: In 2-way MP systems, a catastrophic error during the bootstrap processor (BSP) determination 


process should cause the assertion of IERR#. If the catastrophic error is due to the APIC data bus being stuck 
at electrical zero, then the system hangs without asserting IERR#. 


Implication: 2-way MP systems may hang during boot due to a catastrophic error. This erratum has not been 
observed to date in a typical commercial system, but was found during focused system testing using a grounded 
APIC data bus. 


Workaround: None identified 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 


E3AP. Write to Mask LVT (Programmed as EXTINT) Will Not 
Deassert Outstanding Interrupt 


Problem: If the APIC subsystem is configured in Virtual Wire Mode implemented through the local APIC (i.e., 
the 8259 INTR signal is connected to LINTO and LVT1’s interrupt delivery mode field is programmed as 
EXTINT), a write to LVT1 intended to mask interrupts will not deassert the internal interrupt source if the external 
LINTO signal is already asserted. The interrupt will be erroneously posted to the Pentium Ill processor despite 
the attempt to mask it via the LVT. 


Implication: Because of the masking attempt, interrupts may be generated when the system software expects 
no interrupts to be posted. 


Workaround: Software can issue a write to the 8259A interrupt mask register to deassert the LINTO interrupt 
level, followed by a read to the controller to ensure that the LINTO signal has been deasserted. Once this is 
ensured, software may then issue the write to mask LVT entry 1. 


Status: For the steppings affected see the Summary of Changes at the beginning of this section. 
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DOCUMENTATION CHANGES 


The Documentation Changes listed in this section apply to the following documents: 

° Pentium® Ill Processor for ће SC242 at 450 MHz to 866 MHz and 1.13 GHz datasheet 
e Pentium® Ill Processor for the PGA370 Socket up to 1.0 GHz datasheet 

° P6 Family of Processors Hardware Developer's Manual 

° Intel Architecture Software Developer’s Manual, Volumes 1, 2, and 3 


All Documentation Changes will be incorporated into a future version of the appropriate Pentium III processor 
documentation. 


E1. STPCLK# Pin Definition 


The P6 Family of Processors Hardware Developer's Manual and the Pentium® III Processor at 450 MHz, 500 
MHz, 533B MHz, 550 MHz, 600/600B MHz datasheet both have incorrect definitions of the STPCLK# pin in their 
alphabetical signal listing. These documents incorrectly state: 


The processor continues to snoop bus transactions and service interrupts while in Stop Grant state. 
When STPCLK¢# is deasserted, the processor restarts its internal clock to all units and resumes 
execution. 


They should state: 


The processor continues to snoop bus transactions and may latch interrupts while in Stop Grant 
state. When STPCLK# is deasserted, the processor restarts its internal clock to all units, resumes 
execution, and services any pending interrupts. 


E2.  Invalidating Caches and TLBs 


Section 2.6.4 of the Intel Architecture Software Developer's Manual, Volume 3: System Programming Guide, 
incorrectly states: 


The INVD (invalidate cache with no writeback) instruction invalidates all data and instruction entries in 
the internal caches and TLBs and sends a signal to the external caches indicating that they should be 
invalidated also. 


It should state: 


The INVD (invalidate cache with no writeback) instruction invalidates all data and instruction entries in 
the internal caches and sends a signal to the external caches indicating that they should be invalidated 
also. 
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E3. Handling of Self-Modifying and Cross-Modifying Code 


Section 7.1.3 paragraph 1 of the Intel Architecture Software Developer's Manual Vol 3: System Programming 
incorrectly states: 


The act of a processor writing data into a currently executing code segment with the intent 
of executing that data as code is called self-modifying code. Intel Architecture processors 
exhibit model-specific behavior when executing self-modified code, depending upon how 
far ahead of the current execution pointer the code has been modified. As processor 
architectures become more complex and start to speculatively execute code ahead of the 
retirement point (as in the P6 family processors), the rules regarding which code should 
execute, pre- or post-modification, become blurred. To write self-modifying code and 
ensure that it is compliant with current and future Intel Architectures one of the following 
two coding options should be chosen. 


It should state: 


The act of a processor writing data into a currently executing code segment with the intent 
of executing that data as code is called self-modifying code. Intel Architecture processors 
exhibit model-specific behavior when executing self-modified code, depending upon how 
far ahead of the current execution pointer the code has been modified. As processor 
architectures become more complex and start to speculatively execute code ahead of the 
retirement point (as in the P6 family processors), the rules regarding which code should 
execute, pre- or post-modification, become blurred. To write self-modifying code and 
ensure that it is compliant with current and future Intel Architectures one of the following 
two coding options must be chosen. 


Section 7.1.3 paragraph 6 of the Intel Architecture Software Developer's Manual Vol 3: System Programming 
incorrectly states: 


The act of one processor writing data into the currently executing code segment of a 
second processor with the intent of having the second processor execute that data as code 
is called cross-modifying code. As with self-modifying code, Intel Architecture processors 
exhibit model-specific behavior when executing cross-modifying code, depending upon 
how far ahead of the executing processors current execution pointer the code has been 
modified. To write cross-modifying code and insure that it is compliant with current and 
future Intel Architectures, the following processor synchronization algorithm should be 
implemented. 


It should state: 


The act of one processor writing data into the currently executing code segment of a second 
processor with the intent of having the second processor execute that data as code is called 
cross-modifying code. As with self-modifying code, Intel Architecture processors exhibit 
model-specific behavior when executing cross-modifying code, depending upon how far 
ahead of the executing processors current execution pointer the code has been modified. To 
write cross-modifying code and insure that it is compliant with current and future Intel 
Architectures, the following processor synchronization algorithm must be implemented. 
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E4. Machine Check Architecture Initialization of MCi STATUS 
Registers 


Section 12.5, the last paragraph of the Intel Architecture Software Developer's Manual Vol. 3: System 
Programming Guide incorrectly states: 


The processor can write valid information (such as an ECC error) into the MCi_STATUS registers 
while it is being powered up. As part of the initialization of the MCE exception handler, software 
might examine all the MCi_STATUS registers and log the contents of them, then rewrite them all 
to zeroes. This procedure is not included in the initialization pseudocode in Example 12-1. 


It should state: 


The processor can write valid information (such as an ECC error) into the MCi_STATUS registers 
while it is being powered up. As part of the initialization of the MCE exception handler, software 
might examine all the MCi_STATUS registers and log the contents of them, then rewrite them all 
to zeroes. Following power cycling, the MCi STATUS registers are not guaranteed to have valid 


data until after the registers are initially cleared to all zeroes by software. This procedure is not 
included in the initialization pseudocode in Example 12-1. 


E5. LOCK# Signal Prefix Operands 


Page 3-273, the first sentence of the third paragraph of the Intel Architecture Software Developer's Manual 
Volume 2: Instruction Set Reference states: 


The LOCK prefix can be prepended only to the following instructions and to those forms of the 
instructions that use a memory operand: ADD, ADC, AND, ... 


It should state: 


The LOCK prefix can be prepended only to the following instructions and to those forms of the 
instructions that use a memory operand as the destination operand only: ADD, ADC, АМО, ... 


If the LOCK prefix is used with the memory operand as the source operand then an Invalid 
Opcode (Undefined Opcode), #UD, can occur. 


E6. SMRAM State Save Map Contains Documentation Errors 


In the Intel Architecture Software Developer's Manual Volume 3: System Programming Guide, revision 2 
Chapter 12, “System Management Mode (SMM),” Table 12-1 incorrectly documents the SMBASE+Offset for 
LDT Base on the P6 family of processors. 


The storage locations for these parameters are model specific (i.e., they may differ between the 
Pentium® processor, the Pentium® Pro processor, and other P6 family proliferations). These 
entries in the tables above will be changed to Reserved. Hardware and software may not 
rely on the contents of these Reserved regions. 
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E7. Memory Aliasing with Different Memory Types 


The 4th paragraph of section 9.13.5 of Intel Architecture Software Developer's Manual Vol. 3: Programming the 
PAT states: 


The PAT allows any memory type to be specified in the page table, and therefore it 
is possible to have a single physical page mapped to two different linear addresses 
with different memory types. This practice is strongly discouraged by Intel and 
should be avoided as it may lead to undefined results. 


It should change to: 


The PAT allows any memory type to be specified in the page table, and therefore it 
is possible to have a single physical page mapped to two different linear addresses 
with different memory types. Intel does not support this practice as it may lead to 
undefined operations including processor hang. 


E8. System Management Interrupt (SMI) During Start-up IPI 
Clarification 


The note on section 12.2 of Intel Architecture Software Developer's Manual Vol. 3: System Management 
Interrupt (SMI) states: 


In the P6 family of processors, when a processor that is designated as the 
application processor during an MP initialization protocol is waiting for a startup IPI 
(SIPI), it is in a mode where SMIs are masked. 


It should state: 


In the P6 family of processors, when a processor that is designated as the 
application processor during an MP initialization protocol is waiting for a startup IPI 
(SIPI), it is in a mode where SMIs are masked. However if SMI is received while an 
application processor is in the wait for SIPI mode it will be pended. The processor 
will respond on receipt of a SIPI by immediately servicing the pended SMI and will 
go into SMM before executing from the SIPI vector. 


E9. Runbist will not function when STPCLK# driven low 


Paragraph 5 of Section 6.3 in the P6 Family of Processors Hardware Developer's Manual (Order Number 
244001) currently states: 


Note that RUNBIST will not function when the processor core clock has been 
stopped. All other 1149.1-defined instructions operate independently of the 
processor core clock. 


It should state: 


Note that RUNBIST will not function when the processor STPCLK# input has been 
driven low. All other 1149.1-defined instructions will correctly operate regardless of 
the STPCLK8 signal state. 
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E10. Memory Aliasing with Inconsistent A and D Bits may Cause 
Processor Deadlock 


Add the following note to Chapter 3 and Chapter 9.13.5 of the Intel Architecture Software Developer's Manual, 
Volume 3: System Programming Guide, Revision 2: 


The processor allows memory aliasing by having two Page Directory Entries 
(PDEs) point to a common Page Table Entry (PTE). Software that needs to 
implement memory aliasing in this way should manage the consistency of the 
Accessed and Dirty bits. Allowing the Accessed and Dirty bits for the two PDEs to 
become inconsistent may lead to a processor deadlock. 


E11. An interrupt Could Occur While TSS is Marked Busy 


Paragraph 5 of section 6.1.3 in the Intel Architecture Software Developer's Manual, Volume 3: System 
Programming Guide, currently states: 


For all Intel Architecture processors, tasks are not recursive. A task cannot call or 
jump to itself. 


It should state: 


For all Intel Architecture processors, tasks are not recursive. A task cannot call or 
jump to itself. Because Intel Architecture tasks are not re-entrant, a task used as 
an interrupt handler must have interrupts disabled between the time it completes 
the interrupt and the time it exits with IRET. Otherwise, another interrupt could 
occur while the interrupt task's TSS is still marked busy, causing a #GP fault. 


E12. NMI Unmasked Early When Processor is Running in V86 
Mode 


Section 5.5.1 in the Intel Architecture Software Developer's Manual, Volume 3: System Programming Guide, 
currently states: 


While an NMI interrupt handler is executing, the processor disables additional calls to the 
NMI handler until the next IRET instruction is executed. This blocking of subsequent NMIs 
prevents stacking up calls to NMI handler. It is recommended that the NMI interrupt 
handler be accessed through an interrupt gate to disable maskable hardware interrupts 
(refer to section 5.6.1, "Masking Maskable Hardware Interrupts"). 


It should state: 


While an NMI interrupt handler is executing, the processor disables additional calls to the 
NMI handler until the next IRET instruction is executed. This blocking of subsequent NMIs 
prevents stacking up calls to NMI handler. It is recommended that the NMI interrupt 
handler be accessed through an interrupt gate to disable maskable hardware interrupts 
(refer to section 5.6.1, "Masking Maskable Hardware Interrupts"). If the NMI handler is a 
virtual-8086 task with IOPL less than 3, the IRET from this handler triggers a general- 
protection exception (GP) (section 16.2.7). In this case, NMI is unmasked before the #GP 
handler is invoked. 


68 


ш 
| n tel ® 
PENTIUM® Ill PROCESSOR SPECIFICATION UPDATE 


E13. P6 Reads Two Bytes for POP SEG Instruction 


Paragraph 1 and 2 of section 18.24.1 in Intel Architecture Software Developer's Manual, Volume 3: System 
Programming Guide, currently states: 


When pushing a segment selector onto the stack, the Intel486(TM) processor writes 2 
bytes onto 4-byte stacks and decrements ESP by 4. The P6 family and Pentium® 
processors write 4 bytes, with the upper 2 bytes being zeros. 


When popping a segment selector from the stack, the Intel486(TM) processor reads only 2 
bytes. The P6 family and Pentium® processors read 4 bytes and discard the upper 2 bytes. 
This operation may have an effect if the ESP is close to the stack-segment limit. On the P6 
family and Pentium® processors, stack location at ESP plus 4 may be above the stack 
limit, in which case a stack fault exception (#SS) will be generated. On the Intel486(TM) 
processor, stack location at ESP plus 2 may be less than the stack limit and no exception is 
generated. 


It should state: 


When pushing a segment selector, Intel486(TM) and P6 family processors decrement ESP 
by the operand size and then write two bytes. If the operand size is 32-bits, the upper two 
bytes of the write are unmodified. The Intel Pentium@ processor decrements ESP by the 
operand size and determines the size of the write by the operand size. If the operand size 
is 32-bits, the upper two bytes of the write are zero. 


When popping a segment selector, Intel486(TM) and P6 family processors read two bytes 
and increment ESP by the operand size of the instruction. The Intel Pentium® processor 
determines the size of the read by the operand size and increments ESP by the operand 
size. 


It is possible to align a 32-bit selector push or pop such that the operation will generate an exception on the Intel 
Pentium® processor and not on the Intel486(TM) and P6 family processors. This could occur if the third and/or 

fourth byte of the operation lies beyond the limit of the segment or if the third and/or fourth byte of the operation 

is located on a not-present or inaccessible page. 
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E14. АРІС Register Offsets are Aligned on 128-bit Boundaries 


Paragraph 3 of section 7.5.7 in Intel Architecture Software Developer's Manual, Volume 3: System Programming 
Guide, currently states: 


Within the 4KB APIC register area, the register address allocation scheme is shown in 
Table 7-1. Register offsets are aligned on 128-bit boundaries. All registers must be 
accessed using 32-bit loads and stores. Wider registers (64-bit or 256-bit) are defined and 
accessed as independent multiple 32-bit registers. If a LOCK prefix is used with a MOV 
instruction that accesses the APIC address space, the prefix is ignored; that is a locking 
operation does not take place. 


It should say: 


Within the 4KB APIC register area, the register address allocation scheme is shown in 
Table 7-1. Register offsets are aligned on 128-bit boundaries. All registers must be 
accessed using loads and stores that are aligned on 128-bit boundaries and manipulate the 
registers as 32-bit quantities. Wider registers (64-bit or 256-bit) are defined and accessed 
as independent multiple 32-bit registers. If a LOCK prefix is used with a MOV instruction 
that accesses the APIC address space, the prefix is ignored; that is a locking operation 
does not take place. 


E15. Single Stepping of Instructions Breaks out of HALT State 


Paragraph 1 of section 2.6.5 in Intel Architecture Software Developer's Manual, Volume 3: System Programming 
Guide, currently states: 


The HLT (halt processor) instruction stops the processor until an enabled interrupt (Such as 
NMI or SMI, which are normally enabled), the BINIT# signal, the INIT# signal, or the 
RESET# signal is received. The processor generates a special bus cycle to indicate that 
the halt mode has been entered. Hardware may respond to this signal in a number of 
ways. An indicator light on the front panel may be turned on. An NMI interrupt for 
recording diagnostic information may be generated. Reset initialization may be invoked. 
(Note that the BINIT# pin was introduced with the Pentium® Pro processor) 


It should say: 
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The HLT (halt processor) instruction stops the processor until an enabled interrupt (Such as 
NMI, or SMI which are normally enabled), a debug exception, the BINIT# signal, the INIT# 
signal, or the RESET# signal is received. The processor generates a special bus cycle to 
indicate that the halt mode has been entered. Hardware may respond to this signal ina 
number of ways. An indicator light on the front panel may be turned on. An NMI interrupt 
for recording diagnostic information may be generated. Reset initialization may be invoked. 
(Note that the BINIT# pin was introduced with the Pentium® Pro processor) 
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E16. Additional Signal Resumes Execution While in a HALT State 


Paragraph 1 of the Description section of page 3-291 in Intel Architecture Software Developer's Manual, Volume 
2: Instruction Set Reference Manual, currently states: 


This instruction stops instruction execution and places the processor in a HALT state. An 
enabled interrupt, NMI, or a reset will resume execution. If an interrupt (including NMI) is 
used to resume execution after a HLT instruction, the saved instruction pointer (CS:EIP) 
points to the instruction following the HLT instruction. 


It should say: 


This instruction stops instruction execution and places the processor in a HALT state. An 
enabled interrupt (including NMI and SMI), a debug exception, the BINIT# signal, the INIT# 
signal, or the RESET# signal will resume execution. If an interrupt (including NMI) is used 
to resume execution after a HLT instruction, the saved instruction pointer (CS:EIP) points to 
the instruction following the HLT instruction. 
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E17. PDPTH Loads are Always Uncacheable 


Paragraph 1 of section 3.8.4 in the /ntel Architecture Software Developer's Manual, Volume 3: System 
Programming Guide, currently states: 


Figure 3-20 shows the format for the page-directory-pointer-table, page-directory, and 
page-table entries when 4-KByte pages and 36-bit extended physical addresses are being 
used. Figure 3-21 shows the format for the page-directory-pointer-table and page-directory 
entries when 2-MByte pages and 36-bit extended physical addresses are being used. The 
functions of the flags in these entries are the same as described in Section 3.6.4., "Page- 
Directory and Page-Table Entries". The major differences in these entries are as follows: 


e A page-directory-pointer-table entry is added. 

e Тһе size of the entries are increased from 32 bits to 64 bits. 

e Тһе maximum number of entries in a page directory or page table is 512. 
e The base physical address field in each entry is extended to 24 bits. 


It should state: 


Note: 


Figure 3-20 shows the format for the page-directory-pointer-table, page-directory, and 
page-table entries when 4-KByte pages and 36-bit extended physical addresses are being 
used. Figure 3-21 shows the format for the page-directory-pointer-table and page-directory 
entries when 2-MByte pages and 36-bit extended physical addresses are being used. The 
functions of the flags in these entries are the same as described in Section 3.6.4., "Page- 
Directory and Page-Table Entries". The major differences in these entries are as follows: 


e  Apage-directory-pointer-table entry is added. 

e Тһе size of the entries is increased from 32 bits to 64 bits. 

e The maximum number of entries in a page directory or page table is 512. 
e The base physical address field in each entry is extended to 24 bits. 


Initial processors that implement the PAE address translation mechanism use uncached accesses when 
loading page-directory-pointer table entries (PDPTRs). This behavior is model-specific and not architectural. 
Future processors may cache PDPTRs. 
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E18. SMI During HALT Causes PMC Miscount of Retired 
Instructions 


Table A-6 of Appendix A in the Intel Architecture Software Developer's Manual, Volume 3: System Programming 
Guide, currently states: 


Table A-6. Events That Can Be Counted with the P6 Family Performance-Monitoring Counters (Contd.) 


Mnemonic Event Description Comments 
Name 


Instruction COH INST_RETIRED OOH Number of A hardware interrupt received 

Decoding instructions retired. during/after the last iteration of 

and the REP STOS flow causes the 

Retirement counter to undercount by 1 
instruction. 


It should state: 


Table A-6. Events That Can Be Counted with the P6 Family Performance-Monitoring Counters (Contd.) 


Mnemonic Event Description Comments 
Name 


Instruction COH INST_RETIRED 00H Number of A hardware interrupt received 
Decoding instructions retired. during/after the last iteration of 
and the REP STOS flow causes the 
Retirement counter to undercount by 1 
instruction. 
An SMI received while 
executing a HLT instruction will 
cause the performance counter 
to not count the RSM instruction 
and therefore undercount by 1. 
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E19. 


INIT Message is Not Sent Out Through APIC 


In section 7.6.13 in the Intel Architecture Software Developer's Manual, Volume 3: System Programming Guide, 
currently states: 


101 (INIT Level De-assert) 


(The trigger mode must also be set to 1 and level mode to 0.) Sends a synchronization 
message to all APIC agents to set their arbitration IDs to the values of their APIC IDs. Note 
that the INIT interrupt is sent to all agents, regardless of the destination field value. 
However, at least one valid destination processor should be specified. For future 
compatibility, the software is requested to use a broadcast-to -all ("all-incl-self" shorthand, 
as described below). 


It should state: 
101 (INIT Level De-assert) 
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(The trigger mode must also be set to 1 and level mode to 0.) Sends a synchronization 
message to all APIC agents to set their arbitration IDs to the values of their APIC IDs. Note 
that the INIT interrupt is sent to all agents, regardless of the destination field value; 
however, at least one valid destination processor should be specified. For future 
compatibility, the software should use the "all excluding self" shorthand instead of 
designating a destination processor. 
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SPECIFICATION CLARIFICATIONS 


The Specification Clarifications listed in this section apply to the following documents: 


° Pentium® Ill Processor for ће SC242 at 450 MHz to 1.13 GHz datasheet 
e Pentium® III Processor for the PGA370 Socket up to 1.0 GHz datasheet 

e Рб Family of Processors Hardware Developer's Manual 

° Intel Architecture Software Developer’s Manual, Volumes 1, 2, and 3 


All Specification Clarifications will be incorporated into a future version of the appropriate Pentium Ill processor 
documentation. 


E1. MTRR Initialization Clarification 


The following sentence should be added to the end of the first paragraph of Section 9.11.5 of the Intel 
Architecture Software Developer’s Manual, Volume 3: System Programming Guide: “The MTRRs must be 
disabled prior to initialization or modification.” 


E2. Floating-Point Opcode Clarification 


Section 3.2 of the Intel Architecture Software Developer's Manual, Volume 2: Instruction Set Reference, 
provides detailed descriptions of each Intel Architecture instruction. For some instructions, the clarification 
phrase below needs to be either added to their existing “Comments” section or a “Comments” section needs to 
be created with the clarification phrase. The phrase is as follows: 


The (Instruction shown in the center column of the table below) instruction is actually a 
combination of two instructions — the wait instruction followed by (Instruction shown in the 
table). If the (Instruction shown in the table) instruction should fault in some way (e.g., 
page fault), the value of EIP that is passed to the fault handler will be equal to the EIP of the 
first instruction plus one (i.e., the EIP of the second of the pair of instructions). The FWAIT 
portion of the combined instruction will have completed execution and will typically not be, 
nor need to be, re-executed after the fault handler is completed. 
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In 


The following table lists the affected instructions and the location of the clarification phrase: 


Instruction Set 


Reference Section Opcode Instruction Clarification Page 
FCLEX/FNCLEX-Clear 9B DB E2 FCLEX Add "Comments" section with 3-177 
Exceptions clarification phrase 
FINIT/FNINIT-Initialize 9B DB ЕЗ FINIT Add clarification phrase to 3-204 
Floating-Point Unit existing "Comments" section 
FSAVE/FNSAVE-Store 9B DD /6 FSAVE Add clarification phrase to 3-237 
FPU State m94/108byte existing "Comments" section 
FSTCW/FNSTCW-Store 9B 09 /7 FSTCW Add “Comments” section with 3-250 
Control Word m2byte clarification phrase 
FSTENV/FNSTENV- ЭВ 09 /6 FSTENV Add “Comments” section with 3-253 
Store FPU Environment m14/28byte clarification phrase 
FSTSW/FNSTSW-Store 9B DD /7 FSTSW Add “Comments” section with 3-256 
Status Word m2byte clarification phrase 

9B DF E0 FSTSW AX 
ЕЗ. Non-AGTL+ Output Low Current Clarification 


In Table 10 of the Pentium® III Processor for the SC242 at 450 MHz to 733 MHz datasheet, the note in bold 
should be added: 


Parameter | Min | Max | 


Input Low Voltage 


BCLK only 
; PICCLK only 
9; PWRGOOD 


2.625 
2.625 
2.625 


Input High Voltage 


PICCLK, and 
PWRGOOD only 


All outputs are 
open-drain 


Output Low Voltage 


Output High Voltage 


2.625 V 


| Im 
m 
NOTES: 
T. Unless otherwise noted, all specifications in this table apply to all Intel® Pentium? III processor frequencies. 
2 These values are specified at the processor core pins. 
3. These values are specified at the processor edge fingers. 
4 Parameter measured at 14 mA (for use with TTL inputs). 
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Leakage current affects input, output, and I/O signals. 

(0 < VIN < 2.5 V +5%). 

(0 < VOUT < 2.5 V +5%). 

This specification applies to the Pentium? III processor with CPUID=067xh. 

This specification applies to the Pentium® III processor with CPUID=068xh. 

Parameters apply to all non-AGTL+ signals except for BCLK, PICCLK, and PWRGOOD. 


Specified as the minimum amount of current that the output buffer must be able to sink. However, VOL_MAX 
cannot be guaranteed if this specification is exceeded. 


ee S 0109 SX i» ЛОП 
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In Table 8 of the Pentium® III Processor for ће PGA370 Socket at 500 MHz апа 550 MHz datasheet, the note in 


bold should be added: 


puce rs он т, 
1 
VIL: 5 Input Low Voltage -0.150 УВЕЕ - V 

0.200 


Input Low Voltage 0.700 


МН: 5 Input High Voltage VREF + VTT V 
0.200 


Input High Voltage 2.000 Кари 
Output Low Voltage | | 0.400 ed 


VOH Output High Voltage 7, 9, All outputs are 
open-drain 


OL Output Low Cr 9 | он 

И и НЕЕ 
Current 

еее rn шшш 
Current 


NOTES: 


Unless otherwise noted, all specifications in this table apply to all Intel® Pentium® Ill processor frequencies. 
Parameter measured at 9 mA (for use with TTL inputs). 

(0 < ММ x 2.5 V +5%). 

(0 < VOUT < 2.5 V +5%). 

For BCLK specifications, refer to Table 17 on page 33. 

(0 < VIN < 1.5 V +5%). 

(0 < VOUT < 1.5 V +5%). 

Applies to non-AGTL+ signals BCLK, PICCLK, and PWRGOOD. 

Applies to non-AGTL+ signals except BCLK, PICCLK, and PWRGOOD. 

These values are specified at the processor core pins. 


Specified as the minimum amount of current that the output buffer must be able to sink. However, VOL_MAX 
cannot be guaranteed if this specification is exceeded. 


chocs OUR Оол аа ӘЛА 
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SPECIFICATION CHANGES 


The Specification Changes listed in this section apply to the following documents: 
° Pentium® Ill Processor for ће SC242 at 450 MHz to 1.13 GHz datasheet 

e Pentium® III Processor for the PGA370 Socket up to 1.0 GHz datasheet 

° P6 Family of Processors Hardware Developer's Manual 

° Intel Architecture Software Developer’s Manual, Volumes 1, 2, and 3 


All Specification Changes will be incorporated into a future version of the appropriate Pentium Ill processor 
documentation. 


E1. FRCERR Pin Removed from Specification 


The Pentium Ill processor will not use the FRCERR pin. All references to these pins will be removed from the 
specification. These references currently appear in the Intel Architecture Software Developer's Manual, Volume 
3: System Programming Guide, Appendix B. 


E2. Non-AGTL+ Output Leakage Current Change 


The CMOS, TAP, Clock and APIC Signal Group Output Leakage Current specification (| о in Table 6 of the 
Pentium? III Processor at 450 MHz, 500 MHz, 533B MHz, 550 MHz, 600/600B MHz datasheet) should be 
changed from +15 ЦА to +30 ЦА. 


ЕЗ. RESET# Pin Definition 


The P6 Family of Processors Hardware Developer's Manual and the Pentium® IIl Processor at 450 MHz, 500 
MHz, 533B MHz, 550 MHz, 600/600B MHz datasheet both have incorrect definitions of the RESET# pin in their 
alphabetical signal listing. These documents incorrectly state: 


RESET# must remain active for one microsecond for a “warm” Reset; for a Power-on Reset, 
RESET# must stay active for at least one millisecond after Veccore and CLK have reached their 


proper specifications. 
They should state: 


For a Power-on or "warm" reset, RESET# must stay active for at least one millisecond after 
Vcccone and CLK have reached their proper specifications. 
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E4. Non-AGTL+ Output Low Voltage Change 


In Table 10 of the Pentium® III Processor for the SC242 at 450 MHz to 733 MHz datasheet, the specification in 
bold has changed: 


[Symbol | Parameter — | Min | Мах | 


| Unit | 
VIL Input Low Voltage V 
V 
V BCLK only 
V 9; PWRGOOD 
VIH Input High Voltage 1.7 2.625 V 
1.7 2.625 V 
PICCLK, an 
PWRGOOD onl 
| VOL | Output Low Voltage — | | 05 | У | 
open-drain 
[IOL | Output Low Current | 14 | | mA |3,11 — — | 
||L — | Leakage Current — | | 3100 | pa |567 | 
NOTES: 
T. Unless otherwise noted, all specifications in this table apply to all Intel® Pentium? III processor frequencies. 
2. These values are specified at the processor core pins. 
3. These values are specified at the processor edge fingers. 
4. Parameter measured at 14 mA (for use with TTL inputs). 
5. Leakage current affects input, output, and I/O signals. 
6. (0 < VIN < 2.5 V +5%). 
7. (0 < VOUT < 2.5 V +5%). 
8. This specification applies to the Pentium? III processor with CPUID=067xh. 
9. This specification applies to the Pentium? Ill processor with CPUID=068xh. 
10. Parameters apply to all non-AGTL+ signals except for BCLK, PICCLK, and PWRGOOD. 
11. Specified as the minimum amount of current that the output buffer must be able to sink. However, 


VOL MAX cannot be guaranteed if this specification is exceeded. 


Е5. ЅЕСС2 Processor Package Height Change 


The Pentium? Ill Processor for the SC242 at 450MHz to 733MHz datasheet provides incorrect OLGA package 
height dimensions. Figure 35 shows the OLGA package height for CPUID 067xh = 0.94" and for CPUID 068xh 
- 0.90". 


The correct OLGA package height for the Pentium® IIl Processor – CPUID 067xh is 0.094+0.005". 
The correct OLGA package height for the Pentium® IIl Processor - CPUID 068xh is 0.090+0.005". 
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E6. AGTL-+ Output Valid Delay Change 


In Table 8 of the Pentium® III Processor for the PGA370 Socket at 500E MHz апа 550E MHz datasheet, the 
specification shown in bold has changed: 


T# Parameter Min Max Unit Figure Notes 
T7: AGTL+ Output Valid Delay 0.40 3.255 ns 7 4,10 
| Т8: AGTL+ Input Setup Time (120 | fns јв ј5671 ___| 
| T9: AGTL+ Input Hold Time — [100 | ts 18 [810 


| T10: RESET# Pulse Width — [100 | [т [9 |6910 | 


NOTES: 


1. Unless otherwise noted, all specifications in this table apply to Pentium Ill processors at all frequencies. 
2. These specifications are tested during manufacturing. 


Зе All AC timings for the AGTL+ signals are referenced to the ВСІК rising edge at 1.25% at the processor ріп. All AGTL+ signal 
timings (compatibility signals, etc.) are referenced at 1.00V at the processor pins. 


4. Valid delay timings for these signals are specified into 50 О to 1.5 V, МВЕЕ at 1.0 V +2% and with 56 О on-die Rrr. 


5. A minimum of 3 clocks must be guaranteed between two active-to-inactive transitions of TRDY#. 

6. RESET# can be asserted (active) asynchronously, but must be deasserted synchronously. For 2-way MP systems, RESET# should 
be synchronous. 

7A Specification is for a minimum 0.40 V swing from Vrer - 200 mV to Vrer + 200 mV. This assumes an edge rate of 0.3V/ns. 

8. Specification is for a maximum 1.0 V swing from Vr; - 1V to V+r. This assumes an edge rate of 3V/ns. 


9. This should be measured after VCCcore, Vtr, VCCcuos, and BCLK become stable. 
10. This specification applies to the Pentium Ill processor running at 100 MHz system bus frequency 


E7.  Coppermine-256K FC-PGA Vcc Transient Spec Change 


Intel is changing the Vcc core transient spec for FC-PGA processors running at frequencies of 933MHz and 
above. The spec is changing from —130mV to —110mV. SECC2 processors are not impacted by this change 
since they already meet the —110mV requirement. 
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